command-access-control

What problem does it solve?

This Skill helps you secure Hermes by restricting who can run sensitive commands, where they can work, and how they can manage models and settings.

Core Features & Use Cases

• Tiered access control: Separates admins, limited users, and everyone else with different command permissions.
• Workspace jail enforcement: Blocks risky file and shell operations outside approved per-user directories.
• Model and secrets hardening: Allows safe model switching while preventing configuration abuse, and guides secure migration of API keys into .env files.
• Operational guardrails: Includes deployment notes for multi-user setups, YAML editing pitfalls, and restart/validation steps.
• Use case: An administrator can give a teammate access to Hermes with model switching only, while keeping terminal execution, config changes, and dangerous filesystem actions blocked.

Quick Start

Ask for a secure Hermes access-control setup that reviews the hook script, the permission tiers, and the required config changes for your users.