hermes-cn-desktop
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation includes instructions to install the Rust toolchain using the official installer from
https://sh.rustup.rs. This is a standard and expected procedure for Rust development environments. - [COMMAND_EXECUTION]: The skill provides numerous commands for building and developing the project, including
pnpm install,cargo run, andpnpm tauri:dev. These are typical for a project using TypeScript and Rust. - [EXTERNAL_DOWNLOADS]: A code example in the Rust backend (
force_runtime_update) demonstrates a pattern for downloading and verifying runtime updates from a remote source. This functionality is intended for application maintenance and includes a signature verification step. - [COMMAND_EXECUTION]: The
RuntimeManagerimplementation in Rust utilizesstd::process::Commandto manage the lifecycle of the local Hermes runtime. This is necessary for the application's core functionality of running an embedded agent. - [COMMAND_EXECUTION]: Troubleshooting instructions suggest using
chmod +xto ensure the runtime binary has the necessary execution permissions on macOS and Linux systems.
Audit Metadata