Security checks across malware telemetry and agentic risk
This skill is not clearly malicious, but it bundles broad local access, external LLM calls, cross-skill execution, and conflicting privacy/scope documentation that users should review carefully before installing.
Install only if you are comfortable with a broad local developer assistant. Review the code before use, avoid enabling external LLM settings for sensitive projects unless you intend to transmit prompts, do not pass secrets on the command line, restrict WIKI_PATH or search targets to non-sensitive folders, and be cautious with the run/convert features because they can execute or import code from other Hermes skill locations.
if args:
query = ' '.join(args)
cmd.extend(["-q", query])
result = subprocess.run(cmd, capture_output=True, text=True, timeout=120)
if result.returncode == 0:
return result.stdout
else:64/64 vendors flagged this skill as clean.