hermes-agent-mt AGENTS.md

Development instructions for Hermes Agent, a personal AI assistant that runs through chat platforms, a terminal, a text interface, and a desktop app.

In plain words
What is it for?
Use them when developing or reviewing Hermes Agent code, especially changes involving its core, plugins, skills, tools, or conversation handling.
Why use it?
They give contributors shared guidance for changing a system that remembers conversations, uses skills and plugins, delegates work, and runs scheduled jobs.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/cyborg-garden/hermes-agent-mt/agents-md
Clone the repo
git clone --depth 1 https://github.com/cyborg-garden/hermes-agent-mt

Made for: Codex, OpenCode.

Per session 18,244 This file is loaded in full into every session.
When invoked 18,244 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin 89% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.18244 $0.18244
Opus 5 $0.09122 $0.09122
Sonnet 5 $0.03649 $0.03649
Haiku 4.5 $0.01824 $0.01824

Measured yesterday against content hash 0b5828f02e6c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

hermes-agent-mt AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

89% identical to hermes-agent AGENTS.md — 346 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

AGENTS.md · 1,434 lines

How it starts

The opening of the file, as written. The whole thing — 1,434 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Hermes Agent - Development Guide

Instructions for AI coding assistants and developers working on the hermes-agent codebase.

Never give up on the right solution.

What Hermes Is

Hermes is a personal AI agent that runs the same agent core across a CLI, a messaging gateway (Telegram, Discord, Slack, and ~20 other platforms), a TUI, and an Electron desktop app. It learns across sessions (memory + skills), delegates to subagents, runs scheduled jobs, and drives a real terminal and browser. It is extended primarily through plugins and skills, not by growing the core.

Two properties shape almost every design decision and are the lens for reviewing any change:

  • Per-conversation prompt caching is sacred. A long-lived conversation reuses a cached prefix every turn. Anything that mutates past context, swaps toolsets, or rebuilds the system prompt mid-conversation invalidates that cache and multiplies the user's cost. We do not do it (the one exception is context compression).
  • The core is a narrow waist; capability lives at the edges. Every model tool we add is sent on every API call, so the bar for a new core tool is high. Most new capability should arrive as a CLI command + skill, a service-gated tool, or a plugin — not as core surface.

Contribution Rubric — What We Want / What We Don't

This is the project's intent layer. Use it two ways:

  1. For humans and for your own work — what gets merged and what gets rejected, so a contribution aims at the target.
  2. For automated review (the triage sweeper) — guidance on when a PR is safe to close on the three allowed reasons (implemented_on_main, cannot_reproduce, incoherent) and, just as important, when NOT to close one. Taste-based "we don't want this / out of scope" closes are NOT an automated decision — those stay with a human maintainer. The sweeper's job here is to recognize design intent and avoid wrongly closing a legitimate contribution, not to make the won't-implement call itself.

Read the full file on GitHub · 1,434 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 1,434 lines · 18,244 tokens per session scan A 0b5828f02e6c

Subscribe to this mod's changes

hermes-agent-mt AGENTS.md is an instructions file published in the GitHub repository cyborg-garden/hermes-agent-mt (11 stars, last pushed 5d ago), licensed MIT. It adds 18,244 tokens to every session, about $0.0912 per session on Opus 5. A static security scan graded it A with 0 findings. It is 89% identical to hermes-agent AGENTS.md, differing in 346 lines, and is treated as a copy.