Hermes now leverages NVIDIA's SkillEvaluator on skill installs, checking for PII, leaked secrets, Unicode smuggling, licensing and security issues before you confirm.
We pointed it at our own bundled skills first, and used what it found to improve 11 of them. https://t.co/7l1cSz9UlM
agent skill — A reusable instruction file that teaches an agent how to do one job well — the procedure, the tools, and what counts as done.
AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
Why it matters
Skills are executable content installed from strangers, and install-time scanning is the checkpoint most AI agentAn AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.Full definition → runtimes still do not have.
articleTowards a Risk Assessment of Malicious Skill Files in Coding AgentsRui Yang, Michael Fu, Kla Tantithamthavorn, Chetan Arora, Joey Chua