What the reviewer found

A GitHub authentication setup skill that configures git/gh credentials on the user's own machine: checking for an existing SSH key before offering to generate one is a standard setup step, not reconnaissance, and it explicitly avoids sudo. The curl calls go straight to GitHub's own API using the token just configured, matching the skill's stated purpose.

What was read

The file as it ships in huidge/hermes-skills:

• github/github-auth/SKILL.md

What the static scan said

The scan flagged 4things. The reviewer kept 0 and dismissed 4 as false.

• E3Enumerates the file system for secrets — false positive
• PE2Asks for root — false positive
• PE3Reaches for credential files — false positive
• NETMakes network calls — false positive

How this review was made

Sonnet 5 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.

Produced by agentmods.dev · Sonnet 5 · 7 September 2026