Skip to main content

hermes-agent-skill-authoring

Facilitates the authoring of in-repo SKILL.md files for Hermes Agent, ensuring proper structure and validation.

Install this skill

or
80/100

Security score

The hermes-agent-skill-authoring skill was audited on Jun 5, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 20

Access to hidden dotfiles in home directory

SourceSKILL.md
201. **User-local:** `~/.hermes/skills/<maybe-category>/<name>/SKILL.md` — personal, not shared. Created via `skill_manage(action='create')`.
medium line 130

Access to hidden dotfiles in home directory

SourceSKILL.md
130`metadata.hermes.related_skills` unions both trees (`skills/` in-repo and `~/.hermes/skills/`) at load time. You CAN reference a user-local skill from an in-repo skill, but it won't resolve for other
medium line 141

Access to hidden dotfiles in home directory

SourceSKILL.md
1411. **Using `skill_manage(action='create')` for an in-repo skill.** It writes to `~/.hermes/skills/`, not the repo tree. Use `write_file` for in-repo creation.
medium line 157

Access to hidden dotfiles in home directory

SourceSKILL.md
157- [ ] File is at `skills/<category>/<name>/SKILL.md` (not in `~/.hermes/skills/`)
Scanned on Jun 5, 2026
View Security Dashboard
Installation guide →