hermes-profile-audit

Audit Hermes profiles for Telegram configuration and hardcoded keys.

Updated Sep 1, 2021
One-click install
npx skills add https://github.com/unclehowell/unclehowell --skill hermes-profile-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: hermes-profile-audit
Source: https://github.com/unclehowell/unclehowell/tree/main/skills/hermes-profile-audit
Command: npx skills add https://github.com/unclehowell/unclehowell --skill hermes-profile-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the complexity of managing Hermes agent profiles, ensuring correct Telegram configuration, removing hardcoded keys, and aligning gateways with sessions to prevent misrouted messages and security gaps.

Core Features & Use Cases

  • Profile auditing: detect misconfigurations, missing per-profile Telegram tokens, and hardcoded API keys.
  • Security hardening: standardize config to use environment variables and per-profile credentials.
  • Use Case: When introducing new bots or after migrations, run this skill to align profiles and gateways for reliable operation.

Quick Start

Run the audit workflow to scan all Hermes profiles and fix discovered issues, then restart the relevant gateways to apply changes.

Frequently Asked Questions about hermes-profile-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Hermes agent profiles for correct Telegram configurations?

To audit Hermes agent profiles, run the dedicated audit workflow to scan all profiles, detect misconfigurations, and verify per-profile Telegram tokens are correctly mapped to their gateways.

Why does my Telegram bot misroute messages after a profile migration?

Telegram bot message misrouting occurs when gateway-profile mappings are misaligned. Running a profile audit standardizes these mappings and ensures sessions connect to the correct gateways for reliable message delivery.

How do I remove hardcoded API keys from Hermes profile configurations?

To remove hardcoded API keys from Hermes profiles, execute the security hardening process which enforces loading tokens from environment variables and per-profile credential files instead of inline strings.

When should I run an audit on my Hermes profiles and Telegram gateways?

You should run a Hermes profile audit when onboarding new bots, completing gateway migrations, or performing periodic security hardening to ensure configurations remain structurally valid and secure.

Does the Hermes profile audit require external dependencies or components?

No, the Hermes profile audit requires no external dependencies or components, allowing you to directly scan configuration files and validate environment variable mappings within your existing setup.

What is the best way to harden Telegram gateway-profile mappings in Hermes?

The best way to harden Telegram gateway-profile mappings is to run an audit that enforces config structure, validates explicit gateway mappings, and standardizes token delivery via environment variables.