oh-my-hermes-workflow

SUSPICIOUS: the stated purpose fits a workflow/orchestration skill, but the install and trust model is high risk. It asks users to install Hermes, then download and execute shell scripts from a separate personal GitHub repo that in turn loads 23+ more skills and operates with broad production credentials across GitHub, Vercel, Supabase, monitoring, and messaging systems. Data flows mostly match the workflow purpose, but the supply-chain footprint and credential scope are disproportionate enough to warrant caution.