trixel-hermes

SUSPICIOUS: the skill’s footprint is too broad for its stated helper role, and it encourages autonomous execution of local scripts, repo sync, and SMS sending without explicit approval boundaries. No confirmed malware or hostile exfiltration endpoint is shown, but opaque local scripts, global Git actions, and real-world messaging create medium-to-high security risk.

No explicit embedded malware indicators are present in the script itself (it is a straightforward shell automation around Git). The primary risk is operational and supply-chain adjacent: it automatically stages (`git add .`), auto-commits, and pushes (`git push origin main`) all local repository content from hardcoded personal storage paths to the configured `origin/main` remotes, without validating remote trust, filtering staged files, or requiring user confirmation—creating a credible pathway for accidental or malicious data disclosure if sensitive files exist in those directories or if `origin` is misdirected.