hermes-paperclip-adapter
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to install external software packages, including
hermes-agentvia pip andhermes-paperclip-adaptervia npm, from public registries. - [COMMAND_EXECUTION]: The adapter invokes the
hermesCLI tool and enables toolsets liketerminalandfile, which allow for arbitrary command execution and file manipulation on the host system as part of its primary function. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data which could contain malicious instructions designed to manipulate the AI agent's behavior.
- Ingestion points: The
promptTemplateinSKILL.mdinterpolates external data from Paperclip issues and comments via variables such as{{taskBody}},{{taskTitle}}, and{{commentId}}. - Boundary markers: None. The template uses logical tags for structure but does not include explicit delimiters or instructions to the LLM to ignore potentially malicious embedded commands in the task content.
- Capability inventory: The skill documentation lists toolsets such as
terminal,file,web,browser, andcode_execution, providing the agent with broad system and network access. - Sanitization: No evidence of input sanitization or filtering is described in the integration instructions.
Audit Metadata