hermes-tweet
Warn
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include an installation command (
hermes plugins install Xquik-dev/hermes-tweet) that downloads and executes code from a third-party GitHub repository. This source is not among the verified or well-known services, presenting a supply chain risk. - [PROMPT_INJECTION]: The skill is designed to process untrusted data from X/Twitter, which can be used to influence the agent's behavior.
- Ingestion points: Data enters the agent's context through the
tweet_readtool, which fetches public and private content from X/Twitter. - Boundary markers: There are no instructions for the agent to use delimiters or to ignore potential commands embedded within the fetched social media content.
- Capability inventory: The skill possesses the ability to write data (post, schedule, or draft tweets) through the
tweet_actiontool, creating a path for an indirect injection to trigger unauthorized actions. - Sanitization: The skill instructions do not specify any validation, filtering, or sanitization mechanisms for the data retrieved from external sources.
Audit Metadata