Docs

Hermes Agent

Nous Research's open-source agent. Fully covered for Block and Ask.

What ZYBE can do

Block and Ask, on every rule, for terminal commands, file reads, file writes, patches, web fetches and delegated tasks. After each call ZYBE reads what came back, so injected instructions in a file or a page are caught.

What you do

Install the sensor. Restart Hermes if it was running. Hermes asks a person to approve a new hook the first time it runs; ZYBE records that approval during install, so the developer is never asked.

Check it's working

1. Run hermes and ask it for any command.
2. In the console, open the laptop from Inventory, Endpoints, click Sensor. Hermes Agent shows Blocking.

What the developer sees when blocked

Blocked by shell hook: Blocked by your organisation: ...

For IT

ZYBE's entries are two lines each under pre_tool_call and post_tool_call in the hooks: block of ~/.hermes/config.yaml, and its consent in ~/.hermes/shell-hooks-allowlist.json. Mac and Linux.