hermes-traffic-guardian
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a shell script for verifying release artifacts. This script downloads public keys, signatures, checksums, and package files from the vendor's official GitHub repository at
github.com/prompt-security/clawsec. These downloads are part of a documented integrity verification process. - [COMMAND_EXECUTION]: The documentation provides a script for performing cryptographic verification of downloaded assets. The script uses standard system utilities including
opensslfor signature verification andshasum/sha256sumfor file integrity checks. These commands are defensive in nature and follow security best practices for verifying software distributions.
Audit Metadata