Security audit
Security checks across malware telemetry and agentic risk
This is a legitimate security-audit skill, but it asks for broad automatic self-audits of local history and sensitive directories without clear user control.
Review before installing. Use it only with clear target paths and require explicit confirmation before any history, environment, ~/.ssh, or ~/.hermes checks. Avoid the --install full-scan path unless you trust the PyPI dependency and local LM Studio endpoint, and configure any audit memory to redact sensitive details and expire when no longer needed.
env | grep -E '(PROXY|VPN|TOR|PROXYCHAINS)' # Check unusual files ls -la ~/.hermes/ ls -la ~/.ssh/ ```
# Check unusual files ls -la ~/.hermes/ ls -la ~/.ssh/ ``` ## Audit Report
64/64 vendors flagged this skill as clean.
Detected: suspicious.install_untrusted_source, suspicious.obfuscated_code, suspicious.prompt_injection_instructions
