Is hermes-arxiv-agent safe to install?

Security audit of genggng/hermes-arxiv-agent · Codex Skill by genggng · ★ 123

⚠ CAUTION Basic audit · rule-based scan · 42 published rules

Use with caution — hermes-arxiv-agent triggered warning flags in AgentSkillsHub's security scan. It may be fine for personal trials, but review its credential handling and maintainer before brand or production use.

What it is: 一个基于 Hermes 的 agent skill:每天自动从 arXiv 抓取论文,用 AI 生成中文摘要和作者单位,推送到飞书,并提供本地静态阅读网站。

Red flags detected (1)

Audit summary

Security grade⚠ CAUTION
Quality score64/100
GitHub stars123
LanguagePython
Last updated

Check before you install

Run a live scan → Full details & install 5-dimension deep audit

Related Codex Skill audits

Browse all Codex Skill skills →

This is AgentSkillsHub's free basic audit: an automated rule-based scan with 42 published rules built on SlowMist's agent-security taxonomy (credential theft, obfuscated payloads, privilege escalation, covert instructions to the agent, and more) across 186,000+ open-source AI agent skills and MCP servers, refreshed every 8 hours. A CAUTION grade is a scan result, not a guarantee — deep 5-dimension audits (code · credentials · vendor · supply-chain · operational) are available for enterprise. Audited: .