hermes-agentmesh-async-bus

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s core behavior matches its stated purpose, but its deployment model is risky and disproportionate in trust terms. It disables Redis protections, exposes services on the LAN, and distributes executable worker code plus shared config over plain HTTP from a lightly verifiable personal repo with no release verification.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:51 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fhermes-agentmesh-async-bus%2F@7d6fe4c2a20ec18463e7e5e281416af0a60490069c1e497f75df9229636ce9a2