Security audit
hermes-traffic-guardian
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed security-monitoring scaffold with no active proxy/runtime code in the submitted package.
Installing this version should be low risk because it is documentation/specification only. Before using a future runtime implementation, review the proxy, HTTPS inspection, CA trust, log redaction, and background-mode behavior because traffic monitoring can expose sensitive request data if configured too broadly.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
56/56 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.