ShadowMCP
REPOSITORY EVIDENCE / INDEXABLE REPORT

NousResearch/hermes-agent — MCP & Agent Security Evidence Report

No MCP configuration evidence was observed in the selected bounded scan. Observed evidence classes: Shell / command execution, Download / install, Agent permissions / behavior, CI/CD automation, Supply-chain / dependencies. Evidence observations are review signals, not a safe/unsafe verdict.

Scanned · 2026-09-19Repo Evidence · v9Evidence-first · no safety verdict
Is NousResearch/hermes-agent safe to run?

ShadowMCP does not issue a safe/unsafe verdict. This report shows bounded repository evidence that can help identify what deserves review before running or approving the project.

Scan identity

Report schemashadowmcp.repo-evidence.v9
Scannershadowmcp.web-repo-scan.v22
Scan completed2026-09-19T16:10:14.884Z
Repository branchmain
Scanned commit469296c748e58aaafca0e8e9d2a49309ba591579
Indexation gateIndexable quality gate passed.
Open source repository ↗Run a current scan ↗

Evidence summary

Review priority
Priority review

This is a triage priority, not a repository risk rating.

No MCP configuration evidence was observed in the selected bounded scan. Observed evidence classes: Shell / command execution, Download / install, Agent permissions / behavior, CI/CD automation, Supply-chain / dependencies. Evidence observations are review signals, not a safe/unsafe verdict.

Evidence categories

Shell / command execution

Found

Selected evidence was observed. This does not prove a vulnerability, malicious behavior or unsafe operation.

  • README.mdpowershell
  • setup-hermes.shsudo
  • scripts/check-windows-footguns.pypowershell

Download / install

Found

Selected evidence was observed. This does not prove a vulnerability, malicious behavior or unsafe operation.

  • README.mdcurl, pip install, docker
  • setup-hermes.shinstall/setup script · curl, pip install
  • package.jsonnpm install · install lifecycle: postinstall
  • pyproject.tomlcurl, pip install, docker

MCP configuration

Not found in scanned scope

No matching evidence was observed in the selected bounded scan scope. This is not proof of absence elsewhere.

Agent permissions / behavior

Found

Selected evidence was observed. This does not prove a vulnerability, malicious behavior or unsafe operation.

  • AGENTS.mdagent instruction/config file · tools / permissions, hooks, agent instructions, model config
  • scripts/aa_quality_sync.pymodel config
  • scripts/build_model_catalog.pyagent instructions, model config
  • scripts/build_skills_index.pytools / permissions
  • scripts/check-windows-footguns.pytools / permissions, agent instructions
  • scripts/check_profile_scope_patterns.pytools / permissions, agent instructions

CI/CD automation

Found

Selected evidence was observed. This does not prove a vulnerability, malicious behavior or unsafe operation.

  • .github/workflows35 direct workflow files

Supply-chain / dependencies

Found

Selected evidence was observed. This does not prove a vulnerability, malicious behavior or unsafe operation.

  • package-lock.jsondependency manifest observed · too large to read
  • package.jsonparsed package manifest · 6 declared dependency entries
  • pyproject.tomlparsed pyproject manifest · 7 selected dependency entries

Scope and limitations

Scan mode: BOUNDED_ROOT_AND_SELECTED_DEPTH1. General recursive crawl: NO.

  • Public, selected and bounded repository evidence only.
  • FOUND means evidence observed, not risk or malicious behavior proven.
  • NOT_FOUND_IN_SCANNED_SCOPE is not proof of absence outside the bounded scan.
  • Trust/community metadata is descriptive context, not a security guarantee.
  • Zero selected dependency evidence does not mean zero dependencies.
  • No repository clone or target-code execution.
  • No raw source-file bodies or secret/token values are included in this report.
  • No general recursive crawl.
  • No CVE lookup, package reputation lookup or package registry lookup.
  • No numeric security score and no safe/unsafe verdict.

Repository context

Trust/community metadata is descriptive context only; it is not a security guarantee.

Repository age / activitycreated 2025-07-22 · 423 days old · last push 2026-09-19 · 0 days since last push
Community signalsstars 247083 · forks 51877 · open issues 43877
OwnershipOrganization · NousResearch
LicenseMIT
Repository statearchived NO · fork NO · default branch main

Continue the review

GUIDE

MCP Security Guide

CHECKLIST

MCP Server Security Checklist

DISCOVERY

Shadow MCP Discovery

TOOL

Scan a public repository