Hermes Agent Skill System Uses Trust Levels and Safety Scans to Block Risky Installs

Nous Research's Hermes agent platform includes a skill management system where skills are loaded as knowledge documents only when needed, using a progressive disclosure model to conserve token usage. Official documentation outlines three access levels, from listing skill names to loading full content or specific reference files, and skills automatically become slash commands upon installation. Every skill installed from the Hermes hub passes through a security scanner that checks for prompt injection, data theft, destructive commands, and supply chain threats. The system assigns trust levels based on a skill's source, ranging from built-in and official skills to third-party community registries, with dangerous-rated skills blocked even if a user attempts to force-override. A hash-based mechanism also protects user-modified skills from being silently overwritten during updates, requiring an explicit force flag to proceed.