hermes-agentmesh-async-bus

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s core behavior matches its stated purpose, but its deployment model is risky and disproportionate in trust terms. It disables Redis protections, exposes services on the LAN, and distributes executable worker code plus shared config over plain HTTP from a lightly verifiable personal repo with no release verification.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:51 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fhermes-agentmesh-async-bus%2F@7d6fe4c2a20ec18463e7e5e281416af0a60490069c1e497f75df9229636ce9a2
Security Audit — socket — hermes-agentmesh-async-bus