hermes-paperclip-adapter

SUSPICIOUS: the overall behavior mostly matches the stated purpose of embedding Hermes inside Paperclip, and the Hermes dependency is verifiably official. The main inconsistency is install provenance for the adapter itself: the skill names an npm package that does not match the verified official scoped Paperclip package, which makes the installation instructions unreliable. Even aside from that, the skill enables a high-trust autonomous agent with broad tool, filesystem, and credential scope, so it carries elevated security risk despite plausible purpose alignment.