Hermes Agent ships Security plugin: parallel subagents find and verify code vulnerabilities
NousResearch · x · 2026-11-09
Nous Research released an official Security plugin for Hermes Agent that reviews local codebases for security bugs.
- Builds a threat model first: maps attacker-reachable surfaces and trusted inputs
- Splits code across parallel subagents, validates every candidate finding against the code, and traces whether an attacker can actually exploit it
- Optional test confirmation writes a small reproduction per finding and runs it in a temporary repo copy
- Reports keep evidence, ruled-out candidates and coverage gaps, and export to SARIF
Usable from chat, the CLI, or the Security page in Hermes Desktop.
Related event: Nous Research Launches Hermes Agent Security Plugin for Code Audits(3 posts)→
More from coding & agent
- phoneuse: Open-source tool lets a Linux PC see and control an unmodified iPhone via AirPlay and Bluetooth — mobileraj · 2026-11-09
- Thinking Machines Launches Inkling 2 Small: 594B MoE, Apache 2.0 Weights Next Week — geoffwolfe · 2026-11-09
- 90% of Aggressive AI Critics Have Never Actually Used It, Dev Argues — brandon_galang · 2026-11-09
- Lattice: an open-source local LaTeX research workspace with notes, slides and an AI agent — LINJIEFUN · 2026-11-09
- Swarm agent training needs thousands of agents, ambitious problems and cost math — samiramanabi · 2026-11-09
- MIT-licensed skill embeds Claude agents that can propose but not execute Stripe changes — PawelHuryn · 2026-11-09