hermes-session-maintenance
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands (e.g.,
hermes,sqlite3,date) and bash scripts to perform administrative tasks such as pruning session records, calculating database statistics, and creating backups. - [DATA_EXPOSURE]: The skill accesses local application data, specifically the session history stored in
~/.hermes/state.dband logs in~/.hermes/logs/gateway.log. This access is necessary for its stated purpose of maintenance and token-burn diagnostics and is limited to the application's own data directory. - [SAFE]: All operations are performed locally. No network requests, external downloads, or access to sensitive system-level credentials (such as SSH or cloud provider keys) were detected.
- [PERSISTENCE]: The skill includes instructions for setting up automated maintenance via local cron jobs and bash scripts. These mechanisms are documented for the purpose of enforcing data retention policies and managing disk space.
- [NO_CODE]: The skill consists of instructional markdown and reference guides for the AI agent to follow; it does not ship with pre-compiled binaries or obfuscated code.
Audit Metadata