portable-hermes-agent AGENTS.md

A development guide for Hermes Agent, a personal AI assistant that can run through a command line, messaging platforms, a terminal interface, or an Electron desktop app. It explains its shared agent core, memory, skills, plugins, subagents, scheduled jobs, terminal, and browser capabilities.

In plain words
What is it for?
Use it when adding plugins, skills, tools, subagents, memory, scheduled tasks, messaging integrations, terminal or browser behavior, or desktop and interface features. It also helps review whether a capability belongs in the core or at the edges.
Why use it?
It sets design rules for adding features without making conversations more expensive or the central agent core unnecessarily large. In particular, it explains how changes can affect prompt caching, which reuses part of a conversation between requests.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/aivrar/portable-hermes-agent/agents-md
Clone the repo
git clone --depth 1 https://github.com/aivrar/portable-hermes-agent

Made for: Codex, OpenCode.

Per session 23,135 This file is loaded in full into every session.
When invoked 23,135 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.23135 $0.23135
Opus 5 $0.11568 $0.11568
Sonnet 5 $0.04627 $0.04627
Haiku 4.5 $0.02313 $0.02313

Measured yesterday against content hash 93a12ef7f78a, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

portable-hermes-agent AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to hermes-agent AGENTS.md — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

AGENTS.md · 1,785 lines

How it starts

The opening of the file, as written. The whole thing — 1,785 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Hermes Agent - Development Guide

Instructions for AI coding assistants and developers working on the hermes-agent codebase.

Never give up on the right solution.

What Hermes Is

Hermes is a personal AI agent that runs the same agent core across a CLI, a messaging gateway (Telegram, Discord, Slack, and ~20 other platforms), a TUI, and an Electron desktop app. It learns across sessions (memory + skills), delegates to subagents, runs scheduled jobs, and drives a real terminal and browser. It is extended primarily through plugins and skills, not by growing the core.

Two properties shape almost every design decision and are the lens for reviewing any change:

  • Per-conversation prompt caching is sacred. A long-lived conversation reuses a cached prefix every turn. Anything that mutates past context, swaps toolsets, or rebuilds the system prompt mid-conversation invalidates that cache and multiplies the user's cost. We do not do it (the one exception is context compression).
  • The core is a narrow waist; capability lives at the edges. Every model tool we add is sent on every API call, so the bar for a new core tool is high. Most new capability should arrive as a CLI command + skill, a service-gated tool, or a plugin — not as core surface.

Contribution Rubric — What We Want / What We Don't

This is the project's intent layer. Use it two ways:

  1. For humans and for your own work — what gets merged and what gets rejected, so a contribution aims at the target.
  2. For automated review (the triage sweeper) — guidance on when a PR is safe to close on the three allowed reasons (implemented_on_main, cannot_reproduce, incoherent) and, just as important, when NOT to close one. Taste-based "we don't want this / out of scope" closes are NOT an automated decision — those stay with a human maintainer. The sweeper's job here is to recognize design intent and avoid wrongly closing a legitimate contribution, not to make the won't-implement call itself.

Read the full file on GitHub · 1,785 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 1,785 lines · 23,135 tokens per session scan A 93a12ef7f78a

Subscribe to this mod's changes

portable-hermes-agent AGENTS.md is an instructions file published in the GitHub repository aivrar/portable-hermes-agent (212 stars, last pushed 2d ago), licensed MIT. It adds 23,135 tokens to every session, about $0.1157 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to hermes-agent AGENTS.md, differing in 0 lines, and is treated as a copy.