Use it when your goal in software development and repositories is clear and you can limit it to the data and actions it actually needs.
Directory → SKILL
SKILLcommunityHermes Registry
security-best-practices
security-best-practices is a skill related to software development and repositories. It helps the agent understand code or work with a software project instead of only giving generic advice.
Last registry verification2026-08-09v1.0.0openai
What does it add to Hermes?
security-best-practices is a skill related to software development and repositories. It helps the agent understand code or work with a software project instead of only giving generic advice.
This plain-language explanation is based on the publisher description. The original text remains visible for verification.
Do not add it merely to experiment when Hermes already has a simpler path, or when you cannot review its source and permissions.
Best for users who want a repeatable way of working inside Hermes.
Try it on a disposable repository with read-only access and ask for a summary of one file with its path.
Original publisher description
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Data source
This entry was indexed from Hermes Registry. Our explanation interprets the type and domain without inventing a capability not present upstream.
Security review
Inspect SKILL.md, references, and bundled scripts. Hermes scans skills at install time, but a scan is not a guarantee.
Inspect, install, then test.
- 01Open the source
Match the publisher, license, and description to your need. Check the real update history.
- 02Review permissions and secrets
Never paste a secret value into this site. Use environment-variable names and grant the smallest scope.
- 03Copy setup only after review
The controls below copy text. They do not execute commands on your device.
- 04Test with a non-sensitive task
Inspect the visible tools, then exclude write or delete tools you do not need.
Review the command, then copy it.
hermes skills install https://raw.githubusercontent.com/hermesonehq/hermes-registry/main/skills/red-teaming/security-best-practices/SKILL.md --name security-best-practicesHermes Belarabi does not execute this command. Installation happens on your device and remains subject to Hermes scanning and your review.