awesome-hermes-agent-ecosystem

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: as a reference skill, its content is mostly documentation, but it normalizes broad installation of unaffiliated third-party skills/plugins and autonomous components via direct git clone and other executable setup paths. The official Hermes installer appears same-org and lowers malware concern, yet the overall footprint is high-risk due to transitive trust, credential-bearing integrations, and bypassing the safer official hub installation workflow.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:50 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fawesome-hermes-agent-ecosystem%2F@f156579e66e35a8b1a625cf095c036b465bc2c8e88134cb8d35a074dbb5ee932
Security Audit — socket — awesome-hermes-agent-ecosystem