hermes-persona-builder
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (medium risk: 0.60). 该 skill 明确包含备份并覆盖 $HERMES_HOME/SOUL.md、以及设置属主/权限(hermes:hermes,mode 664)的部署步骤,属于修改服务器上文件与权限的操作,会改变机器状态,虽未直接要求 sudo 或创用户,但仍推动对主机文件系统进行更改。
Issues (1)
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata