awesome-hermes-agent-ecosystem
Warn
Audited by Socket on Sep 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: as a reference skill, its content is mostly documentation, but it normalizes broad installation of unaffiliated third-party skills/plugins and autonomous components via direct git clone and other executable setup paths. The official Hermes installer appears same-org and lowers malware concern, yet the overall footprint is high-risk due to transitive trust, credential-bearing integrations, and bypassing the safer official hub installation workflow.
Confidence: 88%Severity: 74%
Audit Metadata