godmode

SUSPICIOUS: this skill is purpose-built to bypass LLM safeguards, persist jailbreak state in Hermes, and optimize for unfiltered answers. Install provenance is mostly normal and data is sent to official APIs, but the capability itself is fundamentally offensive and high risk for misuse.

This is an explicit model-jailbreaking utility, not ordinary model-integration code. It sends configured API credentials and jailbreak prompts to the selected endpoint and persists successful jailbreak settings locally. The shown code does not establish covert data theft or destructive malware behavior, but its intended safety bypass and dynamic execution of optional sibling scripts present significant risks.

No evidence of traditional host-compromise malware in this module (no execution primitives, persistence, file manipulation, or local data theft). The primary security concern is behavioral and privacy-related: it forwards user-supplied prompts to a third-party LLM gateway (potentially many models concurrently), prints the selected output (risking sensitive data exposure in logs), and includes hardcoded jailbreak-style system prompts plus refusal/hedge heuristics that steer toward non-refusal/unfiltered content. Treat as an LLM proxy with policy-evasion intent and non-trivial data-sharing risk rather than as a stealth malware package.

This module is a dual-use text obfuscation engine focused on detecting cybersecurity/malware-related keywords and rewriting them with stealthy Unicode/zero-width and encoding transformations (leet, homoglyph-like mappings, ZWJ/ZWNJ insertion, fullwidth, Base64/hex, etc.). There is no direct malware behavior in this fragment (no exec, network, or file/process actions), but the design strongly supports evasion of keyword-based filters or security tooling. Treat as moderate-to-high supply-chain risk depending on how and where it is used.