hermes-config-editing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes explicit examples of placing API keys into commands and YAML (e.g., hermes config set "...api_key" "<API_KEY>" and api_key: fields, plus directions to update with a "<full_key>"), which requires the agent to receive and embed secret values verbatim into generated commands or edits — a direct secret-handling/exfiltration risk.