hermes-agent
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONPERSISTENCEPRIVILEGE_ESCALATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides documentation for installing the Hermes Agent using remote shell scripts fetched via
curloriexfrom official repositories (e.g.,github.com/NousResearch/hermes-agentandhermes-agent.nousresearch.com). This is a standard and expected installation pattern for CLI software. - [PERSISTENCE]: The documentation includes instructions for installing the messaging gateway as a background service on Linux (using systemd) and macOS (using launchd). This allows the agent to maintain persistence across system restarts, which is a core feature for its messaging bot capabilities.
- [PRIVILEGE_ESCALATION]: The skill describes the use of
sudoto register the messaging gateway as a system-level service. This is a routine administrative procedure for service management and is documented clearly as requiring user intervention. - [PROMPT_INJECTION]: The reference material contains keywords associated with prompt injection (e.g., "ignore previous instructions") within sections describing the agent's internal security filters and detection mechanisms. These are descriptive examples and do not represent an attempt to bypass agent constraints.
Audit Metadata