hermes-tweet

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The first URL points to a third‑party GitHub repo (Xquik-dev/hermes-tweet) referenced as a direct plugin install from an unfamiliar username, which is a common vector for distributing malicious code; the second URL is an established org (NousResearch) and is not flagged.