hermes
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
hermes_check.pyscript retrieves versioning information from the official GitHub API (api.github.com/repos/NousResearch/hermes-agent) to check for updates. Additionally,getting-started-tutorials.mdreferences an installation script hosted onraw.githubusercontent.com. - [COMMAND_EXECUTION]: The skill frequently executes the local
hermesCLI binary using Python'ssubprocessmodule. These executions are used to perform health checks, retrieve configuration paths, and generate command help summaries for the agent's use. - [DATA_EXFILTRATION]: While the skill accesses sensitive files such as
.envandauth.jsonto verify configuration, it includes explicit redaction logic inhermes_ops_check.pyandhermes_slack_check.pythat masks API keys and Slack tokens before they are printed or incorporated into the agent's context. - [PROMPT_INJECTION]: The skill uses
scripts/hermes_check.pyto ingest output fromhermes --helpand generate a local command map (command-map.generated.md). This creates an indirect prompt injection surface where the agent's behavior could be influenced by instructions embedded in local command documentation, although the risk is minimal in this context.
Audit Metadata