hermes-web-ui-dashboard

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs execution of an auto-setup script piped from a third-party GitHub raw URL and installation from an unverified GitHub repository and npm package, constituting an operational dependency with weak/unknown publisher provenance.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes instructions for creating a systemd service file in /etc/systemd/system/hermes-web-ui.service and running systemctl commands using sudo, which compromises the state of the machine by modifying protected system service configurations.