godmode

SUSPICIOUS. The skill is internally consistent with its stated purpose, but that purpose is to help an AI agent defeat model safety controls, persist jailbreak prompts, and optimize harmful-query success across external models. No confirmed malware or hidden credential theft is shown, yet the offensive capability, config mutation, exec-based local code loading, and third-party API forwarding make it a high-risk AI-agent skill.

The fragment is an openly documented collection of model-jailbreak prompts and agent-invocation instructions. It does not itself contain clear malware or data theft, but it is designed to bypass model safety controls and includes a risky dynamic exec() example. Treat it as untrusted red-team content; do not install or execute the referenced script without verifying its provenance and contents.

This fragment is a high-risk runtime loader: it reads a Python file from a filesystem location determined by the HERMES_HOME environment variable (defaulting to ~/.hermes) and executes the loaded contents via exec(...), with no integrity verification or safeguards. While the visible demo code only performs refusal detection/score printing, the exec primitive means the executed script could implement arbitrary behavior. Without reviewing godmode_race.py, exact malicious intent cannot be confirmed, but the security risk is substantial and warrants immediate scrutiny and containment.