hermai

SUSPICIOUS. The skill is largely coherent with its stated website-automation purpose, and the main network endpoints and install sources are same-org official. However, it has a broad sensitive footprint: optional installation of external tooling, browser cookie import, authenticated traffic capture, and support for real write actions on third-party sites. This looks like a legitimate but high-trust skill with medium security risk from supply-chain hygiene and operational sensitivity rather than confirmed malicious behavior.