hermes-persona-builder

Warn

Audited by Snyk on Jul 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (medium risk: 0.60). 该 skill 明确包含备份并覆盖 $HERMES_HOME/SOUL.md、以及设置属主/权限(hermes:hermes,mode 664)的部署步骤,属于修改服务器上文件与权限的操作,会改变机器状态,虽未直接要求 sudo 或创用户,但仍推动对主机文件系统进行更改。

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 1, 2026, 06:05 AM
Issues
1
Security Audit — snyk — hermes-persona-builder