Hermes Agent Skill
Security checks across malware telemetry and agentic risk
Overview
The skill is an instruction-only wrapper that tells the agent to call the Hermes CLI; its requirements and instructions are internally consistent, but it delegates powerful actions to the external Hermes tool so you should verify that tool before use.
This skill itself only runs the Hermes CLI — it does not request secrets or write files outside ~/.hermes/ — but Hermes can perform browser automation, spawn sub-agents, run code, and will use any LLM provider key you put in ~/.hermes/.env. Before installing/use: (1) verify you trust and install Hermes from the official repository URL referenced in SKILL.md; (2) review the contents of ~/.hermes/ and the .env file so you know which API keys are stored and used; (3) avoid putting high-privilege credentials in ~/.hermes/.env (use scoped or test keys); (4) consider running Hermes and this skill in a sandbox or with manual approval for sensitive operations (delegation, code execution, browser automation); (5) when in doubt, test with a non-sensitive account and inspect Hermes' behavior first.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
VirusTotal findings are pending for this skill version.