skills/bankrbot/skills/hermesone/Socket

hermesone

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is coherent with its stated installer purpose and does not obviously harvest credentials, but it performs host-level download-and-execute of native code from external releases, with mixed publisher provenance and an optional unverifed-install bypass. This looks more like a risky installer skill than confirmed malware.

Confidence: 82%Severity: 68%

Audit Metadata

Analyzed At

Jul 5, 2026, 02:11 PM

Package URL

pkg:socket/skills-sh/BankrBot%2Fopenclaw-skills%2Fhermesone%2F@c07960cf6632d3c99bf88b846dbc56e30cf5d26f25d5d4f1f2ae5173f6a5d66d