hermes-cn-desktop

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation includes instructions to install the Rust toolchain using the official installer from https://sh.rustup.rs. This is a standard and expected procedure for Rust development environments.
  • [COMMAND_EXECUTION]: The skill provides numerous commands for building and developing the project, including pnpm install, cargo run, and pnpm tauri:dev. These are typical for a project using TypeScript and Rust.
  • [EXTERNAL_DOWNLOADS]: A code example in the Rust backend (force_runtime_update) demonstrates a pattern for downloading and verifying runtime updates from a remote source. This functionality is intended for application maintenance and includes a signature verification step.
  • [COMMAND_EXECUTION]: The RuntimeManager implementation in Rust utilizes std::process::Command to manage the lifecycle of the local Hermes runtime. This is necessary for the application's core functionality of running an embedded agent.
  • [COMMAND_EXECUTION]: Troubleshooting instructions suggest using chmod +x to ensure the runtime binary has the necessary execution permissions on macOS and Linux systems.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 08:46 AM
Security Audit — agent-trust-hub — hermes-cn-desktop