hermes-agent-self-evolution
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests historical session data and user-provided artifacts to drive the evolutionary search for better prompts and code.
- Ingestion points: Uses
SessionExtractorto read real usage traces from agent databases (e.g.,~/.hermes/sessions.db). - Boundary markers: No specific boundary markers or instructions to ignore embedded commands within the ingested session history are documented.
- Capability inventory: The skill has the ability to execute code variants, run test suites, and create Pull Requests on GitHub repositories.
- Sanitization: There is no mention of sanitizing or escaping session data before it is processed by the LLM optimizer.
- [DYNAMIC_EXECUTION]: The optimization pipeline involves the automated generation and execution of code mutations to evaluate performance.
- Evidence: The GEPA optimization loop generates candidate variants through mutation and executes them against evaluation datasets to analyze traces.
- Risk: Running code that has been dynamically mutated by an LLM could lead to unintended system side effects if executed outside of a secure sandbox.
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to download the framework from an external repository.
- Evidence: Fetches the framework from the NousResearch repository on GitHub (
https://github.com/NousResearch/hermes-agent-self-evolution.git). - [COMMAND_EXECUTION]: The skill relies on several shell-based commands for setup and execution.
- Evidence: Instructions include the use of
pip install,git clone, andpython -mfor running optimization and data extraction tasks.
Audit Metadata