hermes-core-skills

Security Policy

Reporting a Vulnerability

We take security seriously. If you discover a security vulnerability in any skill, please disclose it responsibly.

Do NOT open a public issue for security vulnerabilities.

Instead, please:

1. Email the maintainer via GitHub Discussions
2. Or open a private advisory

You can expect:

• Acknowledgment within 48 hours
• A status update within 5 business days
• Credit for your discovery (if desired)

Scope

These skills are workflow instructions for AI agents — they don’t execute code themselves. Security concerns are primarily about:

• Skills that handle credentials or API keys (e.g., github-cli-auth-troubleshooting)
• Skills that propose code changes (e.g., security-hardening-checklist)
• Any skill that could be misused

Preferred Languages

English or Traditional Chinese (繁體中文)

This site is open source. Improve this page.