Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/davidtoby/agent-skillsnpx agentmods add skills/davidtoby/agent-skills/hermes-manual-update-and-reportWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/davidtoby/agent-skills/hermes-manual-update-and-report)<a href="https://agentmods.dev/skills/davidtoby/agent-skills/hermes-manual-update-and-report"><img src="https://agentmods.dev/badge/skills/davidtoby/agent-skills/hermes-manual-update-and-report/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/davidtoby/agent-skills/hermes-manual-update-and-report"><img src="https://agentmods.dev/badge/skills/davidtoby/agent-skills/hermes-manual-update-and-report.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00035 | $0.01773 |
| Opus 5 | $0.00017 | $0.00886 |
| Sonnet 5 | $0.00007 | $0.00355 |
| Haiku 4.5 | $0.00003 | $0.00177 |
Grade A, and why
hermes-manual-update-and-report scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 248 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Hermes manual update and maintenance report
Use this when Hermes is installed from a local git checkout and the normal hermes update path is unreliable, blocked by command approval, or reports stale status after updating.
When to use
hermes --versionsays an update is availablehermes updatehangs, times out, or triggers approval errors- the user wants a daily self-maintenance job for Hermes
- you need a report covering both update status and cron job health
Key experiential findings
1) hermes update may fail even when approvals are allowed
In this environment, hermes update triggered approval-path failures and the user saw:
Command Approval RequiredError 200340
Even after the user chose Always, the wrapper path was still unreliable.
Conclusion: when this happens, do not keep retrying hermes update. Switch to the manual repo update flow.
2) Manual update flow works reliably
For a repo checkout at ~/.hermes/hermes-agent, use:
cd ~/.hermes/hermes-agent
git fetch origin main
git rev-parse --short HEAD
git rev-list --left-right --count HEAD...origin/main
Interpretation:
- output like
0 182means local is behind upstream by 182 commits - output
0 0means already current
If behind > 0, run:
git pull --rebase origin main
./venv/bin/python -m ensurepip --upgrade --default-pip
./venv/bin/python -m pip install -e '.[all]'
This matched Hermes' own update logic closely enough to complete the upgrade successfully.
3) pip may be missing inside the venv after update attempts
A real failure encountered:
./venv/bin/python: No module named pip
Fix it with:
./venv/bin/python -m ensurepip --upgrade --default-pip
Then rerun the editable install.
4) Version banner can stay stale after a successful update
After updating to the latest git commit, hermes --version still showed:
Update available: 182 commits behind — run 'hermes update'
But git verification showed:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 248 lines · 35 tokens per session scan A 9555154f0138
hermes-manual-update-and-report is a skill published in the GitHub repository davidtoby/agent-skills (10 stars, last pushed 1mo ago), licensed MIT. It adds 35 tokens to every session and 1,773 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
morph-ppt
Use this skill when the user wants a .pptx with smooth cross-slide animation — PowerPoint Morph transitions, Keynote-style continuous motion, shapes that grow / move / rotate as the slide advances. Trigger on: 'morph', 'morph transition', 'smooth transition', 'continuous animation across slides', 'Keynote-style…
officecli-academic-paper
Use this skill to build academic-style .docx output: journal / conference / thesis chapters carrying formal citation style (APA, Chicago, IEEE, MLA), numbered equations, figure & table cross-references, footnotes/endnotes, bibliography, or multi-column journal layout. Trigger on: 'research paper', 'journal paper'…
officecli-word-form
Use this skill to create fillable Word forms (.docx) with real Content Controls (SDT) + legacy FormField checkboxes + MERGEFIELD mail-merge placeholders + document protection. Trigger on: 'fillable form', 'form fields', 'content controls', 'SDT', 'word form', 'fill in', 'only editable fields', 'protect document'…
officecli
Create, analyze, proofread, and modify Office documents (.docx, .xlsx, .pptx) using the officecli CLI tool. Use when the user wants to create, inspect, check formatting, find issues, add charts, or modify Office documents.
find-skills
Use when automatically discover, evaluate, and activate community skills when local skills don't cover user needs. Includes credibility scoring and safety checks for complete OpenClaw self-sufficiency.
protein-design-qc
Protein design quality control, filtering thresholds, and ranking guidance. Use this skill when: (1) Evaluating design quality for binding, expression, or structure, (2) Setting filtering thresholds for pLDDT, ipTM, PAE, (3) Checking sequence liabilities (cysteines, deamidation, polybasic clusters), (4) Creating…