Trust levels for taps
New taps are assigned community trust by default. Skills installed from them run through the standard security scan and show the third-party warning panel on first install. If your org or a widely-trusted source should get higher trust, add its repo to TRUSTED_REPOS in tools/skills_guard.py (requires a Hermes core PR).
From the official Hermes Agent documentation.