Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Markdown-to-image helper with only minor notes about language defaults and local image caching.
Before installing, be aware that the skill will read the Markdown file you provide, send its summarized content into image generation, and save the resulting image locally in a Hermes cache path. Avoid using sensitive documents unless that processing and local retention are acceptable.
The instruction says that if the document is in Simplified Chinese, all output must be in Simplified Chinese, and if English, all output must be in English. This is a language policy constraint imposed automatically, with no option for the user to request a different output language.
This requirement mandates that generated image text match the source document language exactly, limiting user control over language or locale. Because no override or opt-in is provided, it constitutes a natural-language policy issue.
This markdown skill explicitly states that it will save output to $HOME/.hermes/cache/{date}-{subject}.png, which affects the user's filesystem. The description does not clearly warn the user about local file creation or retention implications beyond listing the output path.
No suspicious patterns detected.
