hermes-web-ui-dashboard

SUSPICIOUS. The skill’s capabilities largely match its stated purpose as an admin dashboard for Hermes, including reading Hermes config/auth files and controlling sessions, files, and gateways. The main concerns are install-trust and scope: a raw GitHub curl-to-bash installer, a Docker image from a third-party-named account using mutable latest tags, and powerful admin features like terminal and cron combined with optional auth disablement. Data flows are mostly coherent with the product, but the footprint is high-risk for an AI skill and should not be treated as low-trust documentation.