hermes-agent-optimization

SUSPICIOUS: the skill's subject matter is coherent, but its actual footprint is broader and riskier than a simple optimization guide. Main concerns are the mismatched install instructions, a root-level raw GitHub bootstrap from a personal repo, transitive installation of third-party skills, and credential forwarding to MCP components. Data flows mostly align with the stated purpose, so this is not confirmed malware, but it is a high-risk operational guide.