Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add AtlasOmnia/hermes-tool-router --skill hermes-tool-router-onboardinggit clone --depth 1 https://github.com/AtlasOmnia/hermes-tool-routerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/atlasomnia/hermes-tool-router/hermes-tool-router-onboarding)<a href="https://agentmods.dev/skills/atlasomnia/hermes-tool-router/hermes-tool-router-onboarding"><img src="https://agentmods.dev/badge/skills/atlasomnia/hermes-tool-router/hermes-tool-router-onboarding/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/atlasomnia/hermes-tool-router/hermes-tool-router-onboarding"><img src="https://agentmods.dev/badge/skills/atlasomnia/hermes-tool-router/hermes-tool-router-onboarding.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00075 | $0.02022 |
| Opus 5 | $0.00037 | $0.01011 |
| Sonnet 5 | $0.00015 | $0.00404 |
| Haiku 4.5 | $0.00007 | $0.00202 |
Grade A, and why
hermes-tool-router-onboarding scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 149 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Hermes Tool Router — First-Run Onboarding
This skill is the onboarding surface for the hermes-tool-router plugin (the standalone
pre-turn tool router). Use it once per fresh profile: explain what the router does, offer the
optional classifier API key exactly once, and verify the router is live. It is written against
the plugin's real behavior — read config.yaml and README.md in the plugin checkout before
changing anything.
The router is disabled by default and experimental. Test it on a separate Hermes profile first; do not install it directly on a primary profile.
1. What the router does
Before the first provider request of a session, the router predicts which toolsets the request needs and narrows the live tool surface to only those toolsets, cutting first-turn token and tool-schema overhead. Key behaviors (all in this plugin, v0.2+):
- Pre-turn toolset prediction: deterministic intent rules classify the user's first turn
and load only the toolsets that request needs (hook:
pre_llm_call). Measured schema reductions in the README baselines are large, but they are estimator results, not billing receipts — treat them as indicative, never as a guarantee. - Session-sticky surface: later turns reuse the initial routed surface instead of reclassifying and shrinking it every turn. This fixed behavior keeps the surface stable across the session.
- Monotonic expansion: if a pruned registered tool is requested later, its owning toolset
is added permanently for the session and is never re-pruned. This fixed behavior comes from
the
tool_requestmiddleware andrequest_toolsetfallback. - Fail open: uncertainty, invalid classifier output, missing confidence, timeout, registry
mismatch, or unsupported runtime keeps the full tool surface. Nothing is ever pruned
unless the router is confident (
fail_open: true,confidence_threshold: 0.90).
The router is disabled by default (global.enabled: false). It must be enabled explicitly
(globally or per profile) before any of the above runs.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 149 lines · 75 tokens per session scan A e413cb47513c
hermes-tool-router-onboarding is a skill published in the GitHub repository AtlasOmnia/hermes-tool-router (117 stars, last pushed 12d ago), licensed MIT. It adds 75 tokens to every session and 2,022 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
wp-plugin-automation
Scripts and workflows to batch-test popular WordPress plugin CVEs across hundreds of domains. Covers automated plugin detection, version extraction from readme.txt, CVE matching against a curated matrix of high-impact plugin vulnerabilities (ElementsKit, Revslider, WPDM, Gravity Forms, Contact Form 7, Jetpack, WP File…
dspy
Build complex AI systems with declarative programming, optimize prompts automatically, create modular RAG systems and agents with DSPy - Stanford NLP's framework for systematic LM programming.
personal-api
Turn an Obsidian vault into an AI-readable personal identity layer. Use when setting up ME.md and AGENT.md, scaffolding the full Knowledge Palace v2 structure, onboarding AI assistants, or maintaining the vault contract. Default setup creates the complete 30.knowledge system; --minimal creates only the lightweight…
wp-plugin-cve-hunt
Systematic approach to finding and testing CVEs for identified WordPress plugins. Covers plugin discovery, version extraction from multiple sources (readme.txt, assets, inline JS), CVE database cross-referencing with WPScan/Patchstack/NVD/NVD API, version-based vulnerability matching, exploitation PoC generation, and…
ml-experiment-review
Use this skill when reviewing an ML experiment, benchmark, ablation, or training run.
m365-entra-attack
Microsoft 365 / Entra ID red-team attack chain — current 2026 reality. AADSTS code reference, user enumeration vectors (with hardening status), Smart Lockout math, Conditional Access bypass options, ROPC + SAML SSO browser flow, Burp/Playwright templates. Built from authorized red-team work where ROPC spray surfaced…