hermes-agent-windows
Hermes Agent with native Windows support and one-line PowerShell installer
Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
pengchengxia75-arch
Source: github_code
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
HERMES_HOMESSH_CLIENTSSH_TTYDISPLAYWAYLAND_DISPLAYHERMES_YOLO_MODEHERMES_SESSION_SOURCEHERMES_INFERENCE_PROVIDERSQLITE_PATHSQLITE_MAX_ROWSAPI_BASE_URLAPI_TOKENAPI_TIMEOUT_SECONDSTERMINAL_ENVHERMES_QUIETHERMES_SPINNER_PAUSEHERMES_INTERACTIVEHERMES_GATEWAY_SESSIONHERMES_EXEC_ASKCAMOFOX_URLAUXILIARY_VISION_MODELAUXILIARY_WEB_EXTRACT_MODELBROWSER_CDP_URLBROWSER_INACTIVITY_TIMEOUTHERMES_CHECKPOINT_TIMEOUTHERMES_RPC_SOCKETHERMES_RPC_DIRHERMES_TIMEZONEDELEGATION_MAX_CONCURRENT_CHILDRENTERMINAL_CWDOPENAI_API_KEYHERMES_WRITE_SAFE_ROOTHASS_URLHASS_TOKENFAL_KEYTOOL_GATEWAY_USER_TOKENTOOL_GATEWAY_SCHEMETOOL_GATEWAY_DOMAINOPENROUTER_API_KEYOSV_ENDPOINTTERMINAL_TIMEOUTTINKER_API_KEYWANDB_ENTITYWANDB_API_KEYHERMES_CRON_AUTO_DELIVER_PLATFORMHERMES_CRON_AUTO_DELIVER_CHAT_IDHERMES_CRON_AUTO_DELIVER_THREAD_IDEMAIL_ADDRESSEMAIL_PASSWORDEMAIL_SMTP_HOSTEMAIL_SMTP_PORTTWILIO_ACCOUNT_SIDTWILIO_PHONE_NUMBERMATTERMOST_URLMATTERMOST_TOKENMATRIX_HOMESERVERMATRIX_ACCESS_TOKENDINGTALK_WEBHOOK_URLQQ_APP_IDQQ_CLIENT_SECRETGITHUB_TOKENGH_TOKENGITHUB_APP_IDGITHUB_APP_PRIVATE_KEY_PATHGITHUB_APP_INSTALLATION_IDHERMES_BUNDLED_SKILLSHERMES_PLATFORMTERMINAL_MAX_FOREGROUND_TIMEOUTTERMINAL_DISK_WARNING_GBSUDO_PASSWORDTERMINAL_DOCKER_MOUNT_CWD_TO_WORKSPACETERMINAL_MODAL_MODETERMINAL_DOCKER_IMAGETERMINAL_SINGULARITY_IMAGETERMINAL_MODAL_IMAGETERMINAL_DAYTONA_IMAGETERMINAL_SSH_HOSTTERMINAL_SSH_USERTERMINAL_SSH_KEYTERMINAL_PERSISTENT_SHELLTERMINAL_LOCAL_PERSISTENTTERMINAL_CONTAINER_PERSISTENTDAYTONA_API_KEYTERMINAL_SANDBOX_DIRTERMINAL_LIFETIME_SECONDSTIRITH_BINMODAL_TOKEN_IDMODAL_TOKEN_SECRETVOICE_TOOLS_OPENAI_KEYSTT_OPENAI_MODELSTT_GROQ_MODELSTT_MISTRAL_MODELGROQ_BASE_URLSTT_OPENAI_BASE_URLGROQ_API_KEYMISTRAL_API_KEYELEVENLABS_API_KEYMINIMAX_API_KEYHERMES_VISION_DOWNLOAD_TIMEOUTPULSE_SERVERFIRECRAWL_API_KEYFIRECRAWL_API_URLPARALLEL_API_KEYTAVILY_API_KEYEXA_API_KEYPARALLEL_SEARCH_MODEBROWSER_USE_API_KEYBROWSERBASE_API_KEYBROWSERBASE_PROJECT_IDBROWSERBASE_BASE_URLBROWSERBASE_PROXIESBROWSERBASE_ADVANCED_STEALTHBROWSERBASE_KEEP_ALIVEBROWSERBASE_SESSION_TIMEOUTFIRECRAWL_BROWSER_TTLSHELLHERMES_GIT_BASH_PATHProgramFilesTERMINAL_SCRATCH_DIRAPPTAINER_CACHEDIRGATEWAY_HEALTH_URLGATEWAY_HEALTH_TIMEOUTANTHROPIC_TOKENCLAUDE_CODE_OAUTH_TOKENHERMES_PORTAL_BASE_URLNOUS_PORTAL_BASE_URLHERMES_CODEX_BASE_URLHERMES_GATEWAY_URLAPI_SERVER_HOSTAPI_SERVER_PORTAPI_SERVER_KEYAPI_SERVER_CORS_ORIGINSAPI_SERVER_MODEL_NAMEHERMES_MAX_ITERATIONSHERMES_REDACT_SECRETSOPENROUTER_BASE_URLHERMES_EPHEMERAL_SYSTEM_PROMPTTERMINAL_SSH_PORTHERMES_OPTIONAL_SKILLSPREFIXTERMUX_VERSIONANTHROPIC_API_KEYHERMES_NOUS_MIN_KEY_TTL_SECONDSHERMES_NOUS_TIMEOUT_SECONDSHERMES_API_CALL_STALE_TIMEOUTHERMES_API_TIMEOUTHERMES_STREAM_READ_TIMEOUTHERMES_STREAM_RETRIESHERMES_STREAM_STALE_TIMEOUTOLLAMA_API_KEYNOUS_INFERENCE_BASE_URLOPENAI_BASE_URLHERMES_COPILOT_ACP_COMMANDCOPILOT_CLI_PATHHERMES_COPILOT_ACP_ARGSHERMES_CRON_SCRIPT_TIMEOUTHERMES_SESSION_PLATFORMHERMES_SESSION_CHAT_IDHERMES_SESSION_CHAT_NAMEHERMES_MODELHERMES_PREFILL_MESSAGES_FILEHERMES_CRON_TIMEOUTSLACK_REQUIRE_MENTIONSLACK_ALLOW_BOTSSLACK_FREE_RESPONSE_CHANNELSDISCORD_REQUIRE_MENTIONDISCORD_FREE_RESPONSE_CHANNELSDISCORD_AUTO_THREADDISCORD_REACTIONSDISCORD_IGNORED_CHANNELSDISCORD_ALLOWED_CHANNELSDISCORD_NO_THREAD_CHANNELSTELEGRAM_REQUIRE_MENTIONTELEGRAM_MENTION_PATTERNSTELEGRAM_FREE_RESPONSE_CHATSTELEGRAM_IGNORED_THREADSTELEGRAM_REACTIONSWHATSAPP_REQUIRE_MENTIONWHATSAPP_MENTION_PATTERNSWHATSAPP_FREE_RESPONSE_CHATSMATRIX_REQUIRE_MENTIONMATRIX_FREE_RESPONSE_ROOMSMATRIX_AUTO_THREADMATRIX_DM_MENTION_THREADSTELEGRAM_BOT_TOKENTELEGRAM_REPLY_TO_MODETELEGRAM_FALLBACK_IPSTELEGRAM_HOME_CHANNELTELEGRAM_HOME_CHANNEL_NAMEDISCORD_BOT_TOKENDISCORD_HOME_CHANNELDISCORD_HOME_CHANNEL_NAMEDISCORD_REPLY_TO_MODEWHATSAPP_ENABLEDSLACK_BOT_TOKENSLACK_HOME_CHANNELSLACK_HOME_CHANNEL_NAMESIGNAL_HTTP_URLSIGNAL_ACCOUNTSIGNAL_IGNORE_STORIESSIGNAL_HOME_CHANNELSIGNAL_HOME_CHANNEL_NAMEMATTERMOST_HOME_CHANNELMATTERMOST_HOME_CHANNEL_NAMEMATRIX_PASSWORDMATRIX_USER_IDMATRIX_ENCRYPTIONMATRIX_DEVICE_IDMATRIX_HOME_ROOMMATRIX_HOME_ROOM_NAMEEMAIL_IMAP_HOSTEMAIL_HOME_ADDRESSEMAIL_HOME_ADDRESS_NAMETWILIO_AUTH_TOKENSMS_HOME_CHANNELSMS_HOME_CHANNEL_NAMEAPI_SERVER_ENABLEDWEBHOOK_ENABLEDWEBHOOK_PORTWEBHOOK_SECRETFEISHU_APP_IDFEISHU_APP_SECRETFEISHU_DOMAINFEISHU_CONNECTION_MODEFEISHU_ENCRYPT_KEYFEISHU_VERIFICATION_TOKENFEISHU_HOME_CHANNELFEISHU_HOME_CHANNEL_NAMEWECOM_BOT_IDWECOM_SECRETWECOM_WEBSOCKET_URLWECOM_HOME_CHANNELWECOM_HOME_CHANNEL_NAMEWECOM_CALLBACK_CORP_IDWECOM_CALLBACK_CORP_SECRETWECOM_CALLBACK_AGENT_IDWECOM_CALLBACK_TOKENWECOM_CALLBACK_ENCODING_AES_KEYWECOM_CALLBACK_HOSTWECOM_CALLBACK_PORTWEIXIN_TOKENWEIXIN_ACCOUNT_IDWEIXIN_BASE_URLWEIXIN_CDN_BASE_URLWEIXIN_DM_POLICYWEIXIN_GROUP_POLICYWEIXIN_ALLOWED_USERSWEIXIN_GROUP_ALLOWED_USERSWEIXIN_SPLIT_MULTILINE_MESSAGESWEIXIN_HOME_CHANNELWEIXIN_HOME_CHANNEL_NAMEBLUEBUBBLES_SERVER_URLBLUEBUBBLES_PASSWORDBLUEBUBBLES_WEBHOOK_HOSTBLUEBUBBLES_WEBHOOK_PORTBLUEBUBBLES_WEBHOOK_PATHBLUEBUBBLES_SEND_READ_RECEIPTSBLUEBUBBLES_HOME_CHANNELBLUEBUBBLES_HOME_CHANNEL_NAMEQQ_ALLOWED_USERSQQ_GROUP_ALLOWED_USERSQQ_HOME_CHANNELQQ_HOME_CHANNEL_NAMESESSION_IDLE_MINUTESSESSION_RESET_HOURTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
18/18 tools missing one or more hints — conversations_list (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); conversation_get (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); messages_read (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +15 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool test coverage
13/18 tools referenced in tests (72%)
Write tests that reference each tool by name so every tool has at least one test.
No access to sensitive paths
Reads sensitive paths: id_rsa, id_ed25519, .netrc
Remove reads of sensitive system paths. If you genuinely need them, document why in the README.
No arbitrary install scripts
Has postinstall/preinstall script — runs arbitrary code on npm install
Remove postinstall/preinstall hooks unless they’re essential.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/pengchengxia75-arch/hermes-agent-windows)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check