hermes-tweet

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is mostly coherent with its stated purpose, and the install path appears to match official Xquik/Hermes documentation. However, it routes social-media operations through an intermediary plugin/service, depends on external plugin installation with limited release verification, and can perform approval-gated public actions, so overall risk is medium rather than benign.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 16, 2026, 03:31 AM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Fhermes-tweet%2F@5c65a9c1b63a245b5380cdf8f8407df9b4d672b89573e44a9c002db4b77eb562
Security Audit — socket — hermes-tweet