collaborating-with-hermes

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly coherent with its academic-collaboration purpose and includes meaningful safeguards, but it sends user materials to external providers and permits approved write actions through an insufficiently described Hermes CLI dependency whose provenance and data handling are not established here.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jul 20, 2026, 02:45 PM
Package URL
pkg:socket/skills-sh/sipengxie2024%2Fsuperpower-writing%2Fcollaborating-with-hermes%2F@9ddff8e82c6fd6148c87f93280a3f3d6ca14a17089f4be6f1175cc5059ae5203
Security Audit — socket — collaborating-with-hermes