prism-hermes

SUSPICIOUS. The skill is purpose-aligned for DeFi trading, but its footprint is high risk: it enables autonomous financial actions, relies on a third-party CLI from a personal GitHub repo, and forwards API credentials into that tool. This looks more like a risky trading/operator skill than clear malware, but it is not low-trust or low-impact.