hermesfusion-multi-model-panel

SUSPICIOUS: the skill’s orchestration behavior broadly matches its stated purpose, but install trust is weak and inconsistent. The advertised package is not verifiable on PyPI, the source install points to an unpinned personal GitHub repo not clearly operated by the publisher, and the skill forwards prompts plus environment credentials into arbitrary child CLIs, including custom commands. This is not confirmed malware, but it is a high-risk third-party orchestration skill with significant supply-chain and credential-forwarding exposure.