skills/maystudios/claude-skills/hermes-tweet/Socket

hermes-tweet

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities broadly match its stated X/Twitter purpose, but it combines third-party plugin installation, credential forwarding to non-official plugin code, and optional public posting actions. The controls described are sensible, yet the trust chain and likely intermediary API model make this a medium-risk skill rather than clearly benign.

Confidence: 80%Severity: 58%

Audit Metadata

Analyzed At

Jul 14, 2026, 03:52 PM

Package URL

pkg:socket/skills-sh/maystudios%2Fclaude-skills%2Fhermes-tweet%2F@e51514cd324036590a4800ba1cf228da1090c923e7cefc29fc519e205a797287