Skills
Navigate
skills/kekewater/hermes-skills/hermes-setup-guide/Gen Agent Trust Hub

hermes-setup-guide

Fail

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the user to download a shell script and pipe it directly to bash using curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash. This allows for the execution of unverified remote code with the current user's permissions.\n- [EXTERNAL_DOWNLOADS]: The skill fetches resources from external GitHub repositories, including the installation script from NousResearch and additional skill repositories from kekewater.\n- [COMMAND_EXECUTION]: The documentation provides multiple shell commands for modifying configurations, installing Python dependencies via pip, and executing curl requests to external APIs for image generation.
Recommendations
  • HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 1, 2026, 05:58 AM