Security audit
Security checks for vulnerabilities and agentic risk
This skill is a documentation-only guide for configuring Hermes to use user-chosen OpenAI-compatible LLM providers, with expected network and credential handling for that purpose.
Before installing, understand that using this skill can reconfigure Hermes so your prompts, model traffic, and API costs go to a chosen third-party or self-hosted provider. Only enter API tokens for providers you trust, review the final Hermes config after changes, and keep backups when migrating profiles or auxiliary tasks.
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
format:
curl -s --request POST \
--url "https://your-endpoint/v1/chat/completions" \
--header "Authorization: Bearer $TOKEN" \
--header "Content-Type: application/json" \
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
Hit the provider's OpenAI-compatible model list endpoint:
curl -s https://opencode.ai/zen/v1/models | python3 -m json.tool
This returns every model the provider serves. The alias will be in the
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
format:
curl -s --request POST \
--url "https://your-endpoint/v1/chat/completions" \
--header "Authorization: Bearer $TOKEN" \
--header "Content-Type: application/json" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
inference. It exposes an OpenAI-compatible endpoint at:
https://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/ai/v1
This means Hermes can use it via provider: custom with no plugin.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
inference. It exposes an OpenAI-compatible endpoint at:
https://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/ai/v1
This means Hermes can use it via provider: custom with no plugin.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
inference. It exposes an OpenAI-compatible endpoint at:
https://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/ai/v1
This means Hermes can use it via provider: custom with no plugin.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
inference. It exposes an OpenAI-compatible endpoint at:
https://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/ai/v1
This means Hermes can use it via provider: custom with no plugin.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
inference. It exposes an OpenAI-compatible endpoint at:
https://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/ai/v1
This means Hermes can use it via provider: custom with no plugin.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
@cf/... prefixed IDs:
curl -s --request POST \
--url "https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/ai/v1/chat/completions" \
--header "Authorization: Bearer ${API_TOKEN}" \
--header "Content-Type: application/json" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Find the default branch
curl -s https://api.github.com/repos/anomalyco/opencode \
| python3 -c "import json,sys; print(json.load(sys.stdin).get('default_branch','unknown'))"
# → "dev" (not "main")
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
# Find the default branch
curl -s https://api.github.com/repos/anomalyco/opencode \
| python3 -c "import json,sys; print(json.load(sys.stdin).get('default_branch','unknown'))"
# → "dev" (not "main")