github Python analyzed 343f6ac

moeyahia/chillspwn-hermes-recovery

Private disaster-recovery snapshot of Chillspwn and Hermes Agent

maintainer: moeyahia
license: —
first seen: 2026-07-16
last seen: 2026-07-16
releases · 30d: 0
short id

risk 79/100 · heuristic grade

D high

capability exposure inferred + 35
recent drift inferred + 20
tool safety inferred + 24

inferred

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

graded 6m ago · see ecosystem CVEs →

risk trajectory 1 movements

4d ago D · 71 → D · 79

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 2 findings · grade factor +24

high dangerous code

committed secret: Google OAuth client secret, Anthropic key, Slack token, OpenAI key · dynamic exec: eval()/exec(), unsafe yaml.load(), __import__(), pickle.loads(), __import__ si…
high hidden prompt content

6 file(s) with hidden prompt content: moeyahia-chillspwn-hermes-recovery-343f6ac/chillspwn/plugin/skills/bb-local-toolkit/SKILL.md (hidden-directive), moeyahia-chillspwn-hermes-re…

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 343f6ac · analyzer v28 · 4d ago

skills & prompt files 188

hidden: skill: hidden-directive moeyahia-chillspwn-hermes-recovery-343f6ac/chillspwn/plugin/skills/bb-local-toolkit/SKILL.md :1100 ignore previous instructions
hidden: skill: hidden-directive moeyahia-chillspwn-hermes-recovery-343f6ac/chillspwn/plugin/skills/bug-bounty/SKILL.md :1100 ignore previous instructions
hidden: skill: skill-exfil moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/github/github-pr-workflow/SKILL.md :364 secret→sink: | Add comment | `gh pr comment N --body "..."` | `curl -X POST .../issues/N/comments -d '{"body":"..."}'` |
hidden: skill: skill-exfil moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/productivity/airtable/SKILL.md :40 secret→sink: - **All requests** use JSON (`Content-Type: application/json` for any POST/PATCH/PUT body).
hidden: skill: skill-exfil moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/github/github-pr-workflow/SKILL.md :364 secret→sink: | Add comment | `gh pr comment N --body "..."` | `curl -X POST .../issues/N/comments -d '{"body":"..."}'` |
hidden: skill: skill-exfil moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/productivity/airtable/SKILL.md :40 secret→sink: - **All requests** use JSON (`Content-Type: application/json` for any POST/PATCH/PUT body).

danger signals61

dynamic code execution eval()/exec() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/red-teaming/godmode/scripts/auto_jailbreak.py :52 exec(compile(open(_parseltongue_path).read(), str(_parseltongue_path), 'exec'), _caller_globals)
dynamic code execution eval()/exec() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/red-teaming/godmode/scripts/load_godmode.py :29 exec(compile(open(path).read(), str(path), 'exec'), ns)
dynamic code execution unsafe yaml.load() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/agent/skill_utils.py :43 return yaml.load(value, Loader=loader)
dynamic code execution __import__() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/hermes_cli/doctor.py :473 __import__(module)
dynamic code execution __import__() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/hermes_cli/memory_setup.py :95 __import__(import_name)
dynamic code execution unsafe yaml.load() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/hermes_cli/xai_retirement.py :207 doc = yaml.load(fh)
dynamic code execution pickle.loads() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/optional-skills/research/darwinian-evolver/scripts/show_snapshot.py :36 outer = pickle.loads(args.snapshot.read_bytes())
dynamic code execution eval()/exec() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/red-teaming/godmode/scripts/auto_jailbreak.py :52 exec(compile(open(_parseltongue_path).read(), str(_parseltongue_path), 'exec'), _caller_globals)
dynamic code execution eval()/exec() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/red-teaming/godmode/scripts/load_godmode.py :29 exec(compile(open(path).read(), str(path), 'exec'), ns)
dynamic code execution eval()/exec() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/agent/test_bedrock_adapter.py :1336 exec("def _boom():\n assert False\n_boom()", fake_globals)
dynamic code execution eval()/exec() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/gateway/test_ssl_certs.py :43 exec(code, mod.__dict__)
dynamic code execution __import__ sink moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/gateway/test_telegram_group_gating.py :375 assert __import__("os").environ["TELEGRAM_REQUIRE_MENTION"] == "true"
dynamic code execution __import__ sink moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/gateway/test_whatsapp_group_gating.py :128 assert __import__("os").environ["WHATSAPP_REQUIRE_MENTION"] == "true"
dynamic code execution unsafe yaml.load() moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/hermes_cli/test_migrate_xai.py :64 return yaml.load(fh)
dynamic code execution __import__ sink moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/hermes_cli/test_web_ui_build.py :115 mock_cp = __import__("subprocess").CompletedProcess([], 0, stdout=b"", stderr=b"")
dynamic code execution unsafe yaml.load() moeyahia-chillspwn-hermes-recovery-343f6ac/scripts/validate-hermes-config.py :269 data = yaml.load(handle, Loader=UniqueKeyLoader)
suspicious endpoint api.telegram.org moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/red-teaming/council-of-ais/scripts/council_summon.py :251 url = f"https://api.telegram.org/bot{bot_token}/sendMessage"
suspicious endpoint t.me moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/hermes_cli/config.py :2430 "url": "https://t.me/BotFather",
suspicious endpoint 169.254.169.254 (cloud metadata) moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/agent/test_azure_identity_adapter.py :627 monkeypatch.setenv("IDENTITY_ENDPOINT", "http://169.254.169.254")
suspicious endpoint 100.63.255.255 moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/agent/test_local_stream_timeout.py :123 "http://100.63.255.255:11434", # just below CGNAT block
suspicious endpoint 100.128.0.1 moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/agent/test_local_stream_timeout.py :124 "http://100.128.0.1:11434", # just above CGNAT block
suspicious endpoint 100.200.0.1 moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/agent/test_local_stream_timeout.py :125 "http://100.200.0.1:11434", # well outside CGNAT
suspicious endpoint 99.64.0.1 moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/agent/test_local_stream_timeout.py :126 "http://99.64.0.1:11434", # first octet wrong
suspicious endpoint 169.254.169.254 (cloud metadata) moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/gateway/test_google_chat.py :338 "https://169.254.169.254/latest/meta-data/",
suspicious endpoint 169.254.169.254 (cloud metadata) moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/gateway/test_media_download_retry.py :414 "http://169.254.169.254/latest/meta-data"
suspicious endpoint 169.254.169.254 (cloud metadata) moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/gateway/test_slack.py :2618 url="http://169.254.169.254/latest/meta-data"
suspicious endpoint api.telegram.org moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/gateway/test_telegram_network.py :72 return httpx.Request("GET", f"https://api.telegram.org{path}")
suspicious endpoint 1.2.3.4 moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/hermes_cli/test_runtime_provider_resolution.py :728 "base_url": "http://1.2.3.4:1234/v1",
suspicious endpoint 8.8.8.8 moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/tools/test_browser_hybrid_routing.py :68 key = browser_tool._navigation_session_key("default", "https://8.8.8.8/")
suspicious endpoint 169.254.169.254 (cloud metadata) moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/tools/test_browser_ssrf_local.py :118 "http://169.254.169.254/latest/meta-data/", # AWS / GCP / Azure / DO / Oracle
suspicious endpoint 100.100.100.200 (cloud metadata) moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/tools/test_browser_ssrf_local.py :121 "http://100.100.100.200/latest/meta-data/", # Alibaba Cloud
suspicious endpoint 169.254.169.254 (cloud metadata) moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/tools/test_url_safety.py :67 assert is_safe_url("http://169.254.169.254/latest/meta-data/") is False
suspicious endpoint 100.100.100.200 (cloud metadata) moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/tools/test_url_safety.py :391 assert is_safe_url("http://100.100.100.200/latest/meta-data/") is False
over-broad OAuth scope gmail.modify moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/productivity/google-workspace/scripts/google_api.py :48 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/drive moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/productivity/google-workspace/scripts/google_api.py :50 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/productivity/google-workspace/scripts/google_api.py :52 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/documents moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/productivity/google-workspace/scripts/google_api.py :53 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope gmail.modify moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/productivity/google-workspace/scripts/setup.py :48 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/drive moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/productivity/google-workspace/scripts/setup.py :50 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/productivity/google-workspace/scripts/setup.py :52 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/documents moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/productivity/google-workspace/scripts/setup.py :53 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope https://www.googleapis.com/auth/cloud-platform moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/agent/google_oauth.py :120 "https://www.googleapis.com/auth/cloud-platform "
over-broad OAuth scope gmail.modify moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/productivity/google-workspace/scripts/google_api.py :48 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/drive moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/productivity/google-workspace/scripts/google_api.py :50 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/productivity/google-workspace/scripts/google_api.py :52 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/documents moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/productivity/google-workspace/scripts/google_api.py :53 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope gmail.modify moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/productivity/google-workspace/scripts/setup.py :48 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/drive moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/productivity/google-workspace/scripts/setup.py :50 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/productivity/google-workspace/scripts/setup.py :52 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/documents moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/productivity/google-workspace/scripts/setup.py :53 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope delete_repo moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/hermes_cli/test_mcp_tools_config.py :80 ("delete_repo", "Delete a repo"),
over-broad OAuth scope gmail.modify moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/skills/test_google_oauth_setup.py :33 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/skills/test_google_oauth_setup.py :37 "https://www.googleapis.com/auth/spreadsheets",
committed secret Google OAuth client secret moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/agent/test_gemini_cloudcode.py :187 GOCSPX…(31 chars, redacted)
committed secret Anthropic key moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/cli/test_quick_commands.py :192 sk-ant…(37 chars, redacted)
committed secret Slack token moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/gateway/test_config.py :635 xoxb-f…(16 chars, redacted)
committed secret Anthropic key moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/hermes_cli/test_anthropic_model_flow_stale_oauth.py :79 sk-ant…(34 chars, redacted)
committed secret OpenAI key moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/tests/hermes_cli/test_debug.py :282 sk-pro…(30 chars, redacted)
suspicious bundled script suspicious bundled script moeyahia-chillspwn-hermes-recovery-343f6ac/chillspwn/plugin/skills/exploit-development/scripts/payload_generator.py :92 $sendback = (iex $data 2>&1 | Out-String )
suspicious bundled script suspicious bundled script moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/runtime/skills/creative/manim-video/scripts/setup.sh :9 python3 -c "import manim" 2>/dev/null && ok "Manim $(manim --version 2>&1 | head -1)" || { fail "Manim not installed: pip install manim"; errors=$((errors+1)); }
suspicious bundled script suspicious bundled script moeyahia-chillspwn-hermes-recovery-343f6ac/hermes/source/skills/creative/manim-video/scripts/setup.sh :9 python3 -c "import manim" 2>/dev/null && ok "Manim $(manim --version 2>&1 | head -1)" || { fail "Manim not installed: pip install manim"; errors=$((errors+1)); }

other grade factors evidence elsewhere

recent drift +20 capability drift →

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:moeyahia/chillspwn-hermes-recovery/badge.svg)](https://mcpobservatory.com/servers/github:moeyahia/chillspwn-hermes-recovery/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of moeyahia.

moeyahia/chillspwn-hermes-recovery

skills & prompt files 188

danger signals61

Navigate

Stream

Features

Display