Sploitus

Exploit for hermes-agent v2026.9.11

kitploit Β· 2026-09-13

Exploit Code

MARKDOWN277 lines
## https://sploitus.com/exploit?id=KITPLOIT:POSTS-GITHUB-NOUSRESEARCH-HERMES-AGENT-V2026911
![Hermes Agent](https://assets.kitploit.com/production/public/readmes/7225/75e85ef6fecf5a6227985f2082e5b35331fceff4d8db03720c82a7d9ee8b7eea.png)

# Hermes Agent ☀

Hermes Agent | Hermes Desktop

![Documentation](https://img.shields.io/badge/Docs-hermes--agent.nousresearch.com-FFD700?style=for-the-badge) ![Discord](https://img.shields.io/badge/Discord-5865F2?style=for-the-badge&logo=discord&logoColor=white) ![License: MIT](https://img.shields.io/badge/License-MIT-green?style=for-the-badge) ![Built by Nous Research](https://img.shields.io/badge/Built%20by-Nous%20Research-blueviolet?style=for-the-badge) ![δΈ­ζ–‡](https://img.shields.io/badge/Lang-%E4%B8%AD%E6%96%87-red?style=for-the-badge) ![اردو](https://img.shields.io/badge/Lang-%D8%A7%D8%B1%D8%AF%D9%88-green?style=for-the-badge) ![EspaΓ±ol](https://img.shields.io/badge/Lang-Espa%C3%B1ol-orange?style=for-the-badge)

**The self-improving AI agent built byNous Research.** It's the only agent with a built-in learning loop β€” it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a deepening model of who you are across sessions. Run it on a $5 VPS, a GPU cluster, or serverless infrastructure that costs nearly nothing when idle. It's not tied to your laptop β€” talk to it from Telegram while it works on a cloud VM.

Use any model you want β€” Nous Portal, OpenRouter, OpenAI, your own endpoint, and many others. Switch with `hermes model` β€” no code changes, no lock-in.

**A real terminal interface**|  Full TUI with multiline editing, slash-command autocomplete, conversation history, interrupt-and-redirect, and streaming tool output.  
---|---  
**Lives where you do**|  Telegram, Discord, Slack, WhatsApp, Signal, and CLI β€” all from a single gateway process. Voice memo transcription, cross-platform conversation continuity.  
**A closed learning loop**|  Agent-curated memory with periodic nudges. Autonomous skill creation after complex tasks. Skills self-improve during use. FTS5 session search with LLM summarization for cross-session recall. Honcho dialectic user modeling. Compatible with the agentskills.io open standard.  
**Scheduled automations**|  Built-in cron scheduler with delivery to any platform. Daily reports, nightly backups, weekly audits β€” all in natural language, running unattended.  
**Delegates and parallelizes**|  Spawn isolated subagents for parallel workstreams. Write Python scripts that call tools via RPC, collapsing multi-step pipelines into zero-context-cost turns.  
**Runs anywhere, not just your laptop**|  Seven terminal backends β€” local, Docker, SSH, Singularity, Modal, Daytona, and Vercel Sandbox. Daytona and Modal offer serverless persistence β€” your agent's environment hibernates when idle and wakes on demand, costing nearly nothing between sessions. Run it on a $5 VPS or a GPU cluster.  
**Research-ready**|  Batch trajectory generation, trajectory compression for training the next generation of tool-calling models.  
  
* * *

## Quick Install

### Linux, macOS, WSL2, Termux

root@kitploit:~
    
    
    curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash
    

### Windows (native, PowerShell)

> **Heads up:** Native Windows runs Hermes without WSL β€” CLI, gateway, TUI, and tools all work natively. If you'd rather use WSL2, the Linux/macOS one-liner above works there too. Found a bug? Please file issues.

Run this in PowerShell:

root@kitploit:~
    
    
    iex (irm https://hermes-agent.nousresearch.com/install.ps1)
    

The installer handles everything: uv, Python 3.11, Node.js, ripgrep, ffmpeg, **and a portable Git Bash** (MinGit, unpacked to `%LOCALAPPDATA%\hermes\git` β€” no admin required, completely isolated from any system Git install). Hermes uses this bundled Git Bash to run shell commands.

If you already have Git installed, the installer detects it and uses that instead. Otherwise a ~45MB MinGit download is all you need β€” it won't touch or interfere with any system Git.

> **Android / Termux:** The tested manual path is documented in the Termux guide. On Termux, Hermes installs a curated `.[termux]` extra because the full `.[all]` extra currently pulls Android-incompatible voice dependencies.
> 
> **Windows:** Native Windows is fully supported β€” the PowerShell one-liner above installs everything. If you'd rather use WSL2, the Linux command works there too. Native Windows install lives under `%LOCALAPPDATA%\hermes`; WSL2 installs under `~/.hermes` as on Linux.

After installation:

root@kitploit:~
    
    
    source ~/.bashrc    # reload shell (or: source ~/.zshrc)
    hermes              # start chatting!
    

### Troubleshooting

#### Windows Defender or antivirus flags `uv.exe` as malware

If your antivirus (Bitdefender, Windows Defender, etc.) quarantines `uv.exe` from the Hermes `bin` folder (`%LOCALAPPDATA%\hermes\bin\uv.exe`), this is a **false positive**. The file is Astral's `uv` β€” the Rust Python package manager Hermes bundles to manage its Python environment. ML-based antivirus engines commonly flag unsigned Rust binaries that download and install packages.

**To verify your copy is authentic:**

root@kitploit:~
    
    
    # Install GitHub CLI if needed
    winget install --id GitHub.cli
    
    # Login to GitHub
    gh auth login
    
    # Run verification
    $uv = "$env:LOCALAPPDATA\hermes\bin\uv.exe"
    $ver = (& $uv --version).Split(' ')[1]
    [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
    $zip = "$env:TEMP\uv.zip"
    Invoke-WebRequest "https://github.com/astral-sh/uv/releases/download/$ver/uv-x86_64-pc-windows-msvc.zip" -OutFile $zip -UseBasicParsing
    gh attestation verify $zip --repo astral-sh/uv
    Expand-Archive $zip "$env:TEMP\uv_x" -Force
    (Get-FileHash "$env:TEMP\uv_x\uv.exe").Hash -eq (Get-FileHash $uv).Hash
    

If attestation says "Verification succeeded" and the last line prints `True`, you're good.

**To whitelist Hermes:**

  * **Windows Defender:** Run PowerShell as Admin β†’ `Add-MpPreference -ExclusionPath "$env:LOCALAPPDATA\hermes\bin"`
  * **Bitdefender:** Add an exception in the Bitdefender console (Protection > Antivirus > Settings > Manage Exceptions)
  * Whitelist the **folder** , not the file hash β€” Hermes updates `uv` and the hash changes every version



For more context, see the upstream Astral reports: astral-sh/uv#13553, astral-sh/uv#15011, astral-sh/uv#10079.

* * *

## Getting Started

root@kitploit:~
    
    
    hermes              # Interactive CLI β€” start a conversation
    hermes model        # Choose your LLM provider and model
    hermes tools        # Configure which tools are enabled
    hermes config set   # Set individual config values
    hermes config get   # Print individual config values
    hermes gateway      # Start the messaging gateway (Telegram, Discord, etc.)
    hermes setup        # Run the full setup wizard (configures everything at once)
    hermes claw migrate # Migrate from OpenClaw (if coming from OpenClaw)
    hermes update       # Update to the latest version
    hermes doctor       # Diagnose any issues
    

πŸ“– **Full documentation β†’**

* * *

## Skip the API-key collection β€” Nous Portal

Hermes works with whatever provider you want β€” that's not changing. But if you'd rather not collect five separate API keys for the model, web search, image generation, TTS, and a cloud browser, **Nous Portal** covers all of them under one subscription:

  * **300+ models** β€” pick any of them with `/model <name>`
  * **Tool Gateway** β€” web search (Firecrawl), image generation (FAL), text-to-speech (OpenAI), cloud browser (Browser Use), all routed through your sub. No extra accounts.



One command from a fresh install:

root@kitploit:~
    
    
    hermes setup --portal
    

That logs you in via OAuth, sets Nous as your provider, and turns on the Tool Gateway. Check what's wired up any time with `hermes portal info`. Full details on the Tool Gateway docs page.

You can still bring your own keys per-tool whenever you want β€” the gateway is per-backend, not all-or-nothing.

* * *

## CLI vs Messaging Quick Reference

Hermes has two entry points: start the terminal UI with `hermes`, or run the gateway and talk to it from Telegram, Discord, Slack, WhatsApp, Signal, or Email. Once you're in a conversation, many slash commands are shared across both interfaces.

Action| CLI| Messaging platforms  
---|---|---  
Start chatting| `hermes`| Run `hermes gateway setup` \+ `hermes gateway start`, then send the bot a message  
Start fresh conversation| `/new` or `/reset`| `/new` or `/reset`  
Change model| `/model [provider:model]`| `/model [provider:model]`  
Set a personality| `/personality [name]`| `/personality [name]`  
Retry or undo the last turn| `/retry`, `/undo`| `/retry`, `/undo`  
Compress context / check usage| `/compress`, `/usage`, `/insights [--days N]`| `/compress`, `/usage`, `/insights [days]`  
Browse skills| `/skills` or `/<skill-name>`| `/<skill-name>`  
Interrupt current work| `Ctrl+C` or send a new message| `/stop` or send a new message  
Platform-specific status| `/platforms`| `/status`, `/sethome`  
  
For the full command lists, see the CLI guide and the Messaging Gateway guide.

* * *

## Documentation

All documentation lives at **hermes-agent.nousresearch.com/docs** :

Section| What's Covered  
---|---  
Quickstart| Install β†’ setup β†’ first conversation in 2 minutes  
CLI Usage| Commands, keybindings, personalities, sessions  
Configuration| Config file, providers, models, all options  
Messaging Gateway| Telegram, Discord, Slack, WhatsApp, Signal, Home Assistant  
Security| Command approval, DM pairing, container isolation  
Tools & Toolsets| 40+ tools, toolset system, terminal backends  
Skills System| Procedural memory, Skills Hub, creating skills  
Memory| Persistent memory, user profiles, best practices  
MCP Integration| Connect any MCP server for extended capabilities  
Cron Scheduling| Scheduled tasks with platform delivery  
Context Files| Project context that shapes every conversation  
Architecture| Project structure, agent loop, key classes  
Contributing| Development setup, PR process, code style  
CLI Reference| All commands and flags  
Environment Variables| Complete env var reference  
  
* * *

## Migrating from OpenClaw

If you're coming from OpenClaw, Hermes can automatically import your settings, memories, skills, and API keys.

**During first-time setup:** The setup wizard (`hermes setup`) automatically detects `~/.openclaw` and offers to migrate before configuration begins.

**Anytime after install:**

root@kitploit:~
    
    
    hermes claw migrate              # Interactive migration (full preset)
    hermes claw migrate --dry-run    # Preview what would be migrated
    hermes claw migrate --preset user-data   # Migrate without secrets
    hermes claw migrate --overwrite  # Overwrite existing conflicts
    

What gets imported:

  * **SOUL.md** β€” persona file
  * **Memories** β€” MEMORY.md and USER.md entries
  * **Skills** β€” user-created skills β†’ `~/.hermes/skills/openclaw-imports/`
  * **Command allowlist** β€” approval patterns
  * **Messaging settings** β€” platform configs, allowed users, working directory
  * **API keys** β€” allowlisted secrets (Telegram, OpenRouter, OpenAI, Anthropic, ElevenLabs)
  * **TTS assets** β€” workspace audio files
  * **Workspace instructions** β€” AGENTS.md (with `--workspace-target`)



See `hermes claw migrate --help` for all options, or use the `openclaw-migration` skill for an interactive agent-guided migration with dry-run previews.

* * *

## Contributing

We welcome contributions! See the Contributing Guide for development setup, code style, and PR process.

Quick start for contributors β€” use the standard installer, then work from the full git checkout it creates at `$HERMES_HOME/hermes-agent` (usually `~/.hermes/hermes-agent`). This matches the layout used by `hermes update`, the managed venv, lazy dependencies, gateway, and docs tooling.

root@kitploit:~
    
    
    curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash
    cd "${HERMES_HOME:-$HOME/.hermes}/hermes-agent"
    uv pip install -e ".[all,dev]"
    scripts/run_tests.sh
    

Manual clone fallback (for throwaway clones/CI where you intentionally do not want the managed install layout):

Create the venv outside the cloned source tree β€” a venv inside the directory the agent operates from can be wiped by a relative-path command the agent runs against its own checkout, destroying the running runtime mid-session.

root@kitploit:~
    
    
    curl -LsSf https://astral.sh/uv/install.sh | sh
    uv venv ~/.hermes/venvs/hermes-dev --python 3.11
    source ~/.hermes/venvs/hermes-dev/bin/activate
    uv pip install -e ".[all,dev]"
    scripts/run_tests.sh
    

* * *

## Community

  * πŸ’¬ Discord
  * πŸ“š Skills Hub
  * πŸ› Issues
  * πŸ”Œ computer-use-linux β€” Linux desktop-control MCP server for Hermes and other MCP hosts, with AT-SPI accessibility trees, Wayland/X11 input, screenshots, and compositor window targeting.
  * πŸ”Œ HermesClaw β€” Community WeChat bridge: Run Hermes Agent and OpenClaw on the same WeChat account.



* * *

## License

MIT β€” see LICENSE.

Built by Nous Research.

Read more