hermes-client-web-ui

SUSPICIOUS: the skill’s capabilities mostly fit its stated purpose, but the install trust model is weaker than ideal because it runs a locally cloned personal GitHub project outside an official registry. Data flows stay local to Hermes/UI functions, with no clear third-party exfiltration, but the browser PTY, file access, and weak default credentials increase operational risk.