hermes-onboarding
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Conducts environment discovery and system-level configuration using commands such as uname, systemctl, docker, and the hermes CLI tool.
- [PRIVILEGE_ESCALATION]: Employs sudo to perform administrative tasks, including installing packages via apt, configuring the firewall with ufw, and managing systemd service units in /etc/systemd/system/. These operations are consistent with production onboarding.
- [PERSISTENCE]: Ensures service availability across reboots by installing multiple systemd services (gateway, dashboard, and browser) and configuring several recurring cron jobs for maintenance and software updates.
- [EXTERNAL_DOWNLOADS]: Installs dependencies from the npm registry and queries the GitHub API for software updates. These target well-known development services and are used for standard maintenance workflows.
- [DYNAMIC_EXECUTION]: Uses python3 -c to execute inline logic for dashboard password hashing, JSON parsing of API responses, and calculating token usage metrics. This includes the pattern flagged by automated scans, which is a benign use of python to parse JSON data from the GitHub API.
- [INDIRECT_PROMPT_INJECTION]: Ingests potentially untrusted data from web search results and system logs. While it lacks explicit boundary markers for these data sources, the risk is minimal given the specialized administrative use case.
Audit Metadata