hermes-desktop-os1-native-macos-client

SUSPICIOUS. The skill’s broad remote-control capabilities fit its stated purpose, and most data flows go to expected Orgo/OpenAI endpoints. However, trust is weakened by an unverifiable prebuilt app path, runtime npx installation of MCP tooling, and optional voice exposure of shell/admin tools that can let the model perform high-impact actions on connected systems.