hermes-agent

SUSPICIOUS. The skill is largely coherent with Hermes Agent's broad framework purpose, and the same-org installer reduces concerns of outright maliciousness. However, it normalizes risky autonomy features, approval bypass, and especially transitive trust through direct URL/GitHub skill installation, which materially increases security exposure beyond a typical documentation skill.