Skip to main content

ocas-weave

Weave creates a private social graph for managing relationships and preferences, enhancing networking and connection discovery.

Install this skill

or
90/100

Security score

The ocas-weave skill was audited on Sep 27, 2026 and we found 2 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 32

Access to home directory dotfiles

SourceSKILL.md
30 - key: HERMES_HOME
31 description: Profile root that owns the canonical DB and skill tree
32 default: ~/.hermes/profiles/indigo
33 - key: AGENT_ROOT
34 description: "Profile root for google_sync.py; must be set explicitly or the sync aborts (why: it resolves sibling skill paths against it)"
medium line 35

Access to home directory dotfiles

SourceSKILL.md
33 - key: AGENT_ROOT
34 description: "Profile root for google_sync.py; must be set explicitly or the sync aborts (why: it resolves sibling skill paths against it)"
35 default: ~/.hermes/profiles/indigo
36 - key: HERMES_PROFILE
37 description: Profile name, used to build canonical DB paths
Scanned on Sep 27, 2026
View Security Dashboard
Installation guide →