Improve Hermes

What is new

GitHub data verified: 2026-10-16 · GitHub

No updates for the selected interests yet.

• hermes-secure-env-plugin — Release published

  Enter secrets over HTTPS outside the chat and language-model context. Version 0.8.2 adds explicitly confirmed code targets, including groups of up to 100 fields, and a shared Unicode 14.0.0 policy. Requires Hermes ≥0.21.7, Python 3.11+ and Linux/POSIX. Use the v0.8.2 tag or wheel: main remains on the older version, and catalog installations do not update automatically. Requires your own TLS and owner authorization. Filling does not confirm sign-in or payment; sites may act on input. Compatibility with every site or screen reader is not guaranteed.

  2026-10-16 v0.8.2 · Source

• Deferred Questions 0.2.5 — Release published

  Nonblocking questions with replies bound to the intended recipient; optional agent continuation never auto-approves actions. Version 0.2.5 adds built-in SQLite header protection without an external watchdog; database body damage is not repaired automatically. Stop older gateway/CLI processes and external database-replacement scripts before upgrading. Hermes ≥0.21.6, Python 3.11+, Linux/macOS; verified on Linux. Runs in-process without host isolation; questions and answers are stored unencrypted in HERMES_HOME. Hermes updates can break the integration.

  2026-10-15 v0.2.5 · Source

• Deferred Questions 0.2.5 — Update

  Deferred Questions 0.2.5 adds a shared nonblocking store lock and recovery limited to the first 24 SQLite header bytes: the original is quarantined, while the database body, delivery receipts, answers and continuation states are not rolled back. Body damage, a nonempty WAL/journal or untrusted metadata refuses recovery. Stop older gateway/CLI processes and external database-replacement scripts before upgrading; this does not fix an unrelated host/TLS file-descriptor bug.

  2026-10-15 · Source

  Source: GitHub

  fix: protect SQLite headers inside the plugin in v0.2.5

• Password filling for registration forms and nested frames — Open — proposal

  This draft PR proposes filling a saved password into a same-form new-password and confirmation pair, including in a nested frame, after explicit approval and an account-email match. A different origin requires separate approval to create a new locally encrypted item; the original binding remains unchanged. The PR depends on open draft #133689 for tab ownership. This is a proposal, not a released feature: it does not generate a password or submit the registration form.

  2026-10-14 · Source

• Opt-in Browser Harness tab isolation — Update

  The draft adds task-aware cleanup of completed tabs and an explicit `close_owned` operation; uncertain ownership remains constrained by checks. The PR is still open, and release inclusion is not verified.

  2026-10-14 · Source

  Source: GitHub

  feat(browser): exact task-aware tab cleanup and explicit release

• hermes-secure-env-plugin — Update

  Version 0.7.12 adds segmented verification-code recognition: only groups of 4–16 adjacent visible text fields in one form with one-time-code evidence are accepted; payment-like and ambiguous fields are rejected. Filling does not authenticate; the site may submit automatically from its own handler.

  2026-10-12 · Source

  Source: GitHub

  fix: recognize guarded N-cell verification code groups

• PR #135962: add Deferred Questions 0.2.4 to the catalog — Closed without merge

  The PR was closed without merging, so it did not add the plugin to the Hermes catalog. It proposed a community plugin, not a Hermes core change; it requires Hermes ≥0.21.6 on Linux/macOS. Windows and host isolation are unsupported; questions and answers are stored unencrypted, private Hermes APIs are used, and exactly-once external edits are not promised.

  2026-10-12 · Source

• Deferred Questions 0.2.5 — Release published

  Nonblocking questions with replies bound to the intended recipient; optional agent continuation never auto-approves actions. Version 0.2.5 adds built-in SQLite header protection without an external watchdog; database body damage is not repaired automatically. Stop older gateway/CLI processes and external database-replacement scripts before upgrading. Hermes ≥0.21.6, Python 3.11+, Linux/macOS; verified on Linux. Runs in-process without host isolation; questions and answers are stored unencrypted in HERMES_HOME. Hermes updates can break the integration.

  2026-10-11 v0.2.4 · Source

• Deferred Questions 0.2.5 — Update

  v0.2.4 declares Hermes ≥0.21.6 and Linux/macOS; it adds a nonblocking admission guard and safe cleanup of completed feedback lock files. Stop older gateway processes before upgrading; questions and answers are stored unencrypted in HERMES_HOME.

  2026-10-11 · Source

  Source: GitHub

  fix: address catalog maintainer feedback in v0.2.4

• PR #135962: add Deferred Questions 0.2.4 to the catalog — Open — proposal

  The PR was closed without merging, so it did not add the plugin to the Hermes catalog. It proposed a community plugin, not a Hermes core change; it requires Hermes ≥0.21.6 on Linux/macOS. Windows and host isolation are unsupported; questions and answers are stored unencrypted, private Hermes APIs are used, and exactly-once external edits are not promised.

  2026-10-10 · Source

• Deferred Questions 0.2.5 — Update

  A portable Deferred Questions distribution was prepared.

  2026-10-10 · Source

  Source: GitHub

  feat: prepare portable deferred questions distribution

• hermes-vk-platform — Update

  Isolated namespaces were added for VK plugin callbacks.

  2026-10-09 · Source

  Source: GitHub

  feat: add isolated namespaced VK plugin callbacks

• Hermes PR #134595 — Closed without merge

  Changes to CDP queue dispatch and late browser replies. Closed does not mean accepted.

  2026-10-09 · Source

• Desktop accessibility and keyboard safety — Open — proposal

  The open PR proposes clearer button names, safer confirmation focus, and terminal screen-reader mode. It is not a full WCAG audit; validation with real screen readers is still needed.

  2026-10-09 · Source

• Hermes PR #119931 — Included in a release

  Add Secure ENV to the Hermes plugin catalog.

  2026-10-08 v0.21.6 · Source

• Hermes PR #115945 — Included in a release

  Add VK Messenger to the Hermes catalog.

  2026-10-08 v0.21.6 · Source

• hermes-secure-env-plugin — Update

  The ruamel YAML dependency is declared; registration no longer requires PyYAML.

  2026-10-08 · Source

  Source: GitHub

  fix: declare ruamel YAML and register without PyYAML

• Opt-in Browser Harness tab isolation — Open — proposal

  This open draft proposes a Browser Harness tab-ownership ledger, mission isolation and bounded cleanup of completed tabs on Linux. The feature is explicitly opt-in; defaults remain unchanged. Closing uses a separate explicit operation, and uncertain operations remain blocked pending investigation. Release inclusion is not verified.

  2026-10-06 · Source

• Captured CDP API for trusted plugins — Closed without merge

  This PR was closed without merging. It proposes a bounded CDP API for trusted Python plugins on an active connection, with reconnect checks and cleanup restricted to the original connection. It adds no model tool, grants no tab-ownership authority, and does not deploy the Secure ENV adapter.

  2026-10-05 · Source

• Context-aware masking for CVC and one-time codes — Open — proposal

  The open PR proposes masking CVC and one-time codes in recognized fields without hiding ordinary amounts and dates. This is not complete leak protection: a code outside recognized context may remain visible.

  2026-10-02 · Source

• Browser Use CLI response timeout — Open — proposal

  Proposes a separate 5–120 second wait for each CDP response. It does not change the overall `browser_exec` timeout or apply to built-in browser tools.

  2026-09-26 · Source

• hermes-vk-platform — Release published

  Connect Hermes to VK Messenger.

  2026-09-25 v0.2.5 · Source

• Hermes PR #119931 — Merged into main

  Add Secure ENV to the Hermes plugin catalog.

  2026-09-23 · Source

• Hermes PR #115945 — Merged into main

  Add VK Messenger to the Hermes catalog.

  2026-09-19 · Source

• hermes-skill-presentation — Update

  Instructions now include readability and timing checks for narrated slides.

  2026-09-05 · Source

  Source: GitHub

  docs: add narrated-slide readability and timing checks

• accessibility-auditor-skill — Update

  Local-source privacy and focused PR boundaries were clarified.

  2026-09-05 · Source

  Source: GitHub

  docs: add local-source privacy and focused PR boundaries

• hermes-skill-author-style-framework — Update

  A skill for building personal author styles was published.

  2026-08-21 · Source

  Source: GitHub

  feat: add author style framework skill

• hermes-skill-anti-ai-polish-ru — Update

  A public skill for polishing formulaic AI style in Russian writing was prepared.

  2026-08-20 · Source

  Source: GitHub

  feat: prepare public anti-ai polish skill

• Explicitly disable web_extract — Open — proposal

  Proposes disabling page extraction with `web.extract_backend=disabled` (also `off` or `false`) without falling back to another backend; `web_search` can remain available. The value `none` is intentionally not treated as disabled.

  2026-08-12 · Source

• Telegram video-note handling — Open — proposal

  Proposes routing Telegram video notes through the existing video-processing path. Previously ignored updates cannot be recovered; the author tested the path with a local fixture.

  2026-06-29 · Source

• Google Tasks support in Google Workspace — Open — proposal

  The open PR adds Google Tasks list/create commands, a dedicated OAuth scope, and uses Hermes’ timezone for Calendar datetimes without an explicit offset. The change is proposed, not merged.

  2026-05-31 · Source

• getdocs-skill — Update

  After downloading documentation, the skill can create a QMD index; missing QMD or an indexing failure does not invalidate the successful download.

  2026-05-12 · Source

  Source: GitHub

  Add optional QMD indexing for downloaded docs

• An AI assistant with skills: why I keep adding capabilities — Article published

  Eight skills for everyday work and development: dates, documentation, updates, forms, code and accessibility.

  2026-05-08 · Source

• accessibility-auditor-skill — Update

  The skill gained a reference to accessibility standards across jurisdictions, PDF, mobile and desktop apps, games, and XR.

  2026-03-23 · Source

  Source: GitHub

  feat: add international accessibility standards reference

• coding-skill — Update

  The development workflow gained stop rules and TDD review checks.

  2026-03-23 · Source

  Source: GitHub

  Add Hard/Soft Stop, TDD checks in review, tdd_cycles in report, test_strategy_unknown

Tools and contributions

No verified events yet. The order is editorial, not a popularity ranking.

Events, not people or installations.

• Plugin

  Deferred Questions 0.2.5

  Nonblocking questions with replies bound to the intended recipient; optional agent continuation never auto-approves actions. Version 0.2.5 adds built-in SQLite header protection without an external watchdog; database body damage is not repaired automatically. Stop older gateway/CLI processes and external database-replacement scripts before upgrading. Hermes ≥0.21.6, Python 3.11+, Linux/macOS; verified on Linux. Runs in-process without host isolation; questions and answers are stored unencrypted in HERMES_HOME. Hermes updates can break the integration.

  Details

• Plugin

  hermes-business-powerpack

  Invoke Hermes in Telegram Business, handle voice messages and stories. Beta: the final reply is sent from your personal account without a separate send-approval screen.

  Details

• Plugin

  hermes-secure-env-plugin

  Enter secrets over HTTPS outside the chat and language-model context. Version 0.8.2 adds explicitly confirmed code targets, including groups of up to 100 fields, and a shared Unicode 14.0.0 policy. Requires Hermes ≥0.21.7, Python 3.11+ and Linux/POSIX. Use the v0.8.2 tag or wheel: main remains on the older version, and catalog installations do not update automatically. Requires your own TLS and owner authorization. Filling does not confirm sign-in or payment; sites may act on input. Compatibility with every site or screen reader is not guaranteed.

  Details

• Plugin

  hermes-vk-platform

  Connect Hermes to VK Messenger.

  Details

• Skill

  hermes-skill-author-style-framework

  Build a personal writing-style skill.

  Details

• Skill

  hermes-skill-anti-ai-polish-ru

  Editorial checks for formulaic AI style in Russian texts.

  Details

• Skill

  hermes-skill-high-quality-document-ocr

  Extract text from document images with quality checks.

  Details

• Skill

  hermes-skill-presentation

  Prepare presentations through a repeatable workflow.

  Details

• Skill

  getdocs-skill

  Save public documentation for later analysis.

  Details

• Skill

  ambient-skill

  Get an AI answer with Ambient inference provenance. This does not verify that the answer is factually true.

  Details

• Skill

  coding-skill

  Project-oriented delivery from a task to a verified result.

  Details

• Skill

  errloop-skill

  Error monitoring with agent-readable records.

  Details

• Skill

  accessibility-auditor-skill

  Audit website and application accessibility against WCAG and GOST.

  Details

• Skill

  hermes-skill-blockchain-philosophy-audit

  Examine the user value and purpose of a blockchain project.

  Details

• Skill

  registry-search

  Compact read-only search in local JSON/JSONL registries.

  Details

• Hermes contribution

  PR #135962: add Deferred Questions 0.2.4 to the catalog

  The PR was closed without merging, so it did not add the plugin to the Hermes catalog. It proposed a community plugin, not a Hermes core change; it requires Hermes ≥0.21.6 on Linux/macOS. Windows and host isolation are unsupported; questions and answers are stored unencrypted, private Hermes APIs are used, and exactly-once external edits are not promised.

  Closed without merge

  Details

• Hermes contribution

  Desktop accessibility and keyboard safety

  The open PR proposes clearer button names, safer confirmation focus, and terminal screen-reader mode. It is not a full WCAG audit; validation with real screen readers is still needed.

  Open — proposal

  Details

• Hermes contribution

  Hermes PR #134595

  Changes to CDP queue dispatch and late browser replies. Closed does not mean accepted.

  Closed without merge

  Details

• Hermes contribution

  Hermes PR #119931

  Add Secure ENV to the Hermes plugin catalog.

  Merged into main

  Details

• Hermes contribution

  Hermes PR #115945

  Add VK Messenger to the Hermes catalog.

  Merged into main

  Details

• Hermes contribution

  Context-aware masking for CVC and one-time codes

  The open PR proposes masking CVC and one-time codes in recognized fields without hiding ordinary amounts and dates. This is not complete leak protection: a code outside recognized context may remain visible.

  Open — proposal

  Details

• Hermes contribution

  Browser Use CLI response timeout

  Proposes a separate 5–120 second wait for each CDP response. It does not change the overall `browser_exec` timeout or apply to built-in browser tools.

  Open — proposal

  Details

• Hermes contribution

  Google Tasks support in Google Workspace

  The open PR adds Google Tasks list/create commands, a dedicated OAuth scope, and uses Hermes’ timezone for Calendar datetimes without an explicit offset. The change is proposed, not merged.

  Open — proposal

  Details

• Hermes contribution

  Telegram video-note handling

  Proposes routing Telegram video notes through the existing video-processing path. Previously ignored updates cannot be recovered; the author tested the path with a local fixture.

  Open — proposal

  Details

• Hermes contribution

  Explicitly disable web_extract

  Proposes disabling page extraction with `web.extract_backend=disabled` (also `off` or `false`) without falling back to another backend; `web_search` can remain available. The value `none` is intentionally not treated as disabled.

  Open — proposal

  Details

• Hermes contribution

  Captured CDP API for trusted plugins

  This PR was closed without merging. It proposes a bounded CDP API for trusted Python plugins on an active connection, with reconnect checks and cleanup restricted to the original connection. It adds no model tool, grants no tab-ownership authority, and does not deploy the Secure ENV adapter.

  Closed without merge

  Details

• Hermes contribution

  Opt-in Browser Harness tab isolation

  This open draft proposes a Browser Harness tab-ownership ledger, mission isolation and bounded cleanup of completed tabs on Linux. The feature is explicitly opt-in; defaults remain unchanged. Closing uses a separate explicit operation, and uncertain operations remain blocked pending investigation. Release inclusion is not verified.

  Open — proposal

  Details

• Hermes contribution

  Password filling for registration forms and nested frames

  This draft PR proposes filling a saved password into a same-form new-password and confirmation pair, including in a nested frame, after explicit approval and an account-email match. A different origin requires separate approval to create a new locally encrypted item; the original binding remains unchanged. The PR depends on open draft #133689 for tab ownership. This is a proposal, not a released feature: it does not generate a password or submit the registration form.

  Open — proposal

  Details

Related articles

• An AI assistant with skills: why I keep adding capabilities

  Eight skills for everyday work and development: dates, documentation, updates, forms, code and accessibility.

Related projects and cases

• Accessibility Auditor Skill

  An AI-agent workflow for the first layer of accessibility auditing: websites, mobile and desktop apps, repositories, and a clear backlog of fixes.

• /coding Skill

  A project-oriented delivery workflow for OpenClaw: planning, implementation, review, and safe coding work.

Help with this task

• AI consultation and workflow review

  Diagnosis of the workflow, bottlenecks, risks, and ROI: what is worth automating, where an agent helps, and where manual control is safer.

  Discuss the task

• AI agent setup for a specific business task

  An agent for a concrete process: data sources, rules, quality checks, safe autonomy boundaries, and ongoing support.

  Discuss the task