<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Robin Beraud-Sudreau</title>
    <description>The latest articles on DEV Community by Robin Beraud-Sudreau (@robinberaud).</description>
    <link>https://dev.to/robinberaud</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3992645%2F05600fad-ea1a-406a-b264-8e6525d46f78.png</url>
      <title>DEV Community: Robin Beraud-Sudreau</title>
      <link>https://dev.to/robinberaud</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/robinberaud"/>
    <language>en</language>
    <item>
      <title>Stop doing price-per-m math by hand on property alert emails</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Tue, 27 Oct 2026 10:02:21 +0000</pubDate>
      <link>https://dev.to/robinberaud/stop-doing-price-per-m2-math-by-hand-on-property-alert-emails-2b6b</link>
      <guid>https://dev.to/robinberaud/stop-doing-price-per-m2-math-by-hand-on-property-alert-emails-2b6b</guid>
      <description>&lt;p&gt;If you follow property alerts, you know the routine: ten emails, each with a price and a surface, and you divide in your head to see whether anything is actually cheap for the area. It is boring, error-prone, and the one good listing is usually buried.&lt;/p&gt;

&lt;p&gt;I wrote a small Hermes skill, &lt;code&gt;listing-alert-triage&lt;/code&gt;, that does this step for you. It is one Python file using only the standard library. No API key, no network.&lt;/p&gt;

&lt;p&gt;It reads plain text, HTML or &lt;code&gt;.eml&lt;/code&gt; exports, finds an amount followed by €/EUR and a number followed by m²/m2, guesses the city (&lt;code&gt;Lyon 69003&lt;/code&gt;, &lt;code&gt;33000 Bordeaux&lt;/code&gt;, &lt;code&gt;à Lille&lt;/code&gt;), and computes the price per m². You provide your own reference price per m² for each city, and it ranks listings as GEM, watch or pass. Anything absurdly cheap gets a &lt;code&gt;?&lt;/code&gt; because that is more often a typo or a scam than a bargain. You can also exclude by min/max surface or max price, and output text, JSON or CSV.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;python3 scripts/triage.py alerts/&lt;span class="k"&gt;*&lt;/span&gt;.eml &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;--ref&lt;/span&gt; &lt;span class="nv"&gt;Nantes&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;3900 &lt;span class="nt"&gt;--ref&lt;/span&gt; &lt;span class="nv"&gt;Rennes&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;3400 &lt;span class="nt"&gt;--max-price&lt;/span&gt; 400000
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;





&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;[watch   ] Nantes  168 000 EUR  48 m2  3 500 EUR/m2  ref 3900.0  ratio 0.90x
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Honest limits: extraction is heuristic, so check the first run against the original email. It does not value anything, and it only knows euros and square metres. I tested it on synthetic fixtures only.&lt;/p&gt;

&lt;p&gt;The skill is MIT licensed in the hermes-skills library.&lt;/p&gt;




&lt;p&gt;Skill (MIT): &lt;a href="https://github.com/RobinBeraud/hermes-skills/tree/main/automation/listing-alert-triage" rel="noopener noreferrer"&gt;https://github.com/RobinBeraud/hermes-skills/tree/main/automation/listing-alert-triage&lt;/a&gt;&lt;br&gt;
All skills: &lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;https://github.com/RobinBeraud/hermes-skills&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;This post was written with AI assistance and reviewed through automated checks.&lt;/em&gt;&lt;/p&gt;

</description>
      <category>hermesagent</category>
      <category>ai</category>
      <category>opensource</category>
      <category>automation</category>
    </item>
    <item>
      <title>Hermes Skills Just Got Easier: One-Command Installation for AI Agent Setup</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Mon, 26 Oct 2026 22:05:31 +0000</pubDate>
      <link>https://dev.to/robinberaud/hermes-skills-just-got-easier-one-command-installation-for-ai-agent-setup-5e23</link>
      <guid>https://dev.to/robinberaud/hermes-skills-just-got-easier-one-command-installation-for-ai-agent-setup-5e23</guid>
      <description>&lt;h1&gt;
  
  
  Hermes Skills Just Got Easier: One-Command Installation for AI Agent Setup
&lt;/h1&gt;

&lt;h2&gt;
  
  
  The Problem: Setup Friction
&lt;/h2&gt;

&lt;p&gt;Getting started with AI agent skills shouldn't require navigating complex installation procedures, multiple configuration files, or lengthy documentation deep-dives. Yet that's often the reality when adopting open-source AI tools.&lt;/p&gt;

&lt;p&gt;The Hermes AI agent community just addressed this pain point. The latest update to the &lt;code&gt;hermes-skills&lt;/code&gt; repository introduces a &lt;strong&gt;one-command install section&lt;/strong&gt; in the README—simplifying how developers bootstrap their skill environment.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Changed?
&lt;/h2&gt;

&lt;p&gt;The updated documentation now provides a streamlined installation path right at the top of the README. Instead of hunting through multiple sections or jumping between docs, users get a clear, copy-paste-ready command to get Hermes skills up and running.&lt;/p&gt;

&lt;p&gt;This small but significant change reflects a philosophy many open-source projects are adopting: &lt;strong&gt;reduce time-to-first-success&lt;/strong&gt;.&lt;/p&gt;

&lt;h2&gt;
  
  
  How to Use It
&lt;/h2&gt;

&lt;p&gt;Head over to the &lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;hermes-skills GitHub repository&lt;/a&gt; and look for the one-command install section in the README. The command is designed to:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Clone or download the skills package&lt;/li&gt;
&lt;li&gt;Install all dependencies&lt;/li&gt;
&lt;li&gt;Prepare your environment for Hermes integration&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Run it once, and you're ready to start building or using Hermes skills without wrestling configuration.&lt;/p&gt;

&lt;h2&gt;
  
  
  Integrating with Your Hermes AI Agent
&lt;/h2&gt;

&lt;p&gt;Once installed, integrating skills with your Hermes agent is straightforward:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Discover available skills&lt;/strong&gt; - Browse the installed skills directory&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Load them into Hermes&lt;/strong&gt; - Your agent automatically discovers compatible skills&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Start using them&lt;/strong&gt; - Skills extend your agent's capabilities immediately&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Whether you're building a productivity agent, a data processing pipeline, or an automation workflow, Hermes skills provide modular, composable functionality without reinventing the wheel.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why This Matters
&lt;/h2&gt;

&lt;p&gt;Installation friction is a silent killer of adoption. Every extra step, every unclear instruction, every dependency hunt creates opportunities for developers to abandon setup and try something else.&lt;/p&gt;

&lt;p&gt;By prioritizing clear, one-command onboarding, Hermes-skills removes barriers and lets developers focus on what matters: building intelligent agents.&lt;/p&gt;

&lt;h2&gt;
  
  
  Next Steps
&lt;/h2&gt;

&lt;p&gt;If you're interested in:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Building custom Hermes skills&lt;/strong&gt; - Check the repository for skill templates&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Contributing to the project&lt;/strong&gt; - PRs and community contributions are welcome&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Following updates&lt;/strong&gt; - Star the repo to stay informed about improvements&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Get Started Today
&lt;/h2&gt;

&lt;p&gt;Ready to supercharge your Hermes AI agent? Head to &lt;strong&gt;&lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;github.com/RobinBeraud/hermes-skills&lt;/a&gt;&lt;/strong&gt; and give it a star while you're there. Your feedback and contributions help make this tool better for everyone.&lt;/p&gt;

&lt;p&gt;The barrier to entry just got lower. What will you build?&lt;/p&gt;

</description>
      <category>hermes</category>
      <category>ai</category>
      <category>automation</category>
      <category>opensource</category>
    </item>
    <item>
      <title>Keep Secrets Out of Git: Introducing env-secrets-scanner for Hermes AI</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Mon, 26 Oct 2026 21:58:02 +0000</pubDate>
      <link>https://dev.to/robinberaud/keep-secrets-out-of-git-introducing-env-secrets-scanner-for-hermes-ai-41j1</link>
      <guid>https://dev.to/robinberaud/keep-secrets-out-of-git-introducing-env-secrets-scanner-for-hermes-ai-41j1</guid>
      <description>&lt;h1&gt;
  
  
  Keep Secrets Out of Git: Introducing env-secrets-scanner for Hermes AI
&lt;/h1&gt;

&lt;h2&gt;
  
  
  The Problem
&lt;/h2&gt;

&lt;p&gt;Accidentally committing secrets is one of the most common security mistakes in software development. A forgotten &lt;code&gt;.env&lt;/code&gt; file, an API key hardcoded in a script, or credentials embedded in a URL can silently slip into your git history—and once it's there, it's there forever. Even if you delete it later, anyone with access to the repository can still find it by browsing the commit history.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;env-secrets-scanner&lt;/strong&gt; solves this problem by scanning your project &lt;em&gt;before&lt;/em&gt; you commit, catching leaked secrets before they reach your repository.&lt;/p&gt;

&lt;h2&gt;
  
  
  How It Works
&lt;/h2&gt;

&lt;p&gt;env-secrets-scanner is a lightweight Python scanner (Python 3.8+, standard library only) that runs offline with zero external dependencies. It detects:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Real &lt;code&gt;.env&lt;/code&gt; files and key files (&lt;code&gt;*.pem&lt;/code&gt;, &lt;code&gt;*.key&lt;/code&gt;, &lt;code&gt;id_rsa&lt;/code&gt;)&lt;/li&gt;
&lt;li&gt;Private key blocks, AWS keys, GitHub tokens, Slack tokens, and Stripe keys&lt;/li&gt;
&lt;li&gt;Credentials embedded in URLs (&lt;code&gt;scheme://user:password@host&lt;/code&gt;)&lt;/li&gt;
&lt;li&gt;Suspicious variable assignments like &lt;code&gt;password = "..."&lt;/code&gt;
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The best part? &lt;strong&gt;All findings are masked&lt;/strong&gt; in the output, so the report itself is safe to share in a chat or ticket without exposing sensitive data.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="c"&gt;# Scan your entire project&lt;/span&gt;
python3 scripts/scan_secrets.py /path/to/project

&lt;span class="c"&gt;# Check only staged files before committing&lt;/span&gt;
python3 scripts/scan_secrets.py /path/to/repo &lt;span class="nt"&gt;--staged&lt;/span&gt;

&lt;span class="c"&gt;# Get machine-readable JSON output&lt;/span&gt;
python3 scripts/scan_secrets.py &lt;span class="nb"&gt;.&lt;/span&gt; &lt;span class="nt"&gt;--json&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Exit codes make it perfect for git hooks: &lt;code&gt;0&lt;/code&gt; (clean), &lt;code&gt;1&lt;/code&gt; (findings), &lt;code&gt;2&lt;/code&gt; (usage error).&lt;/p&gt;

&lt;h2&gt;
  
  
  Using It with Hermes AI
&lt;/h2&gt;

&lt;p&gt;The env-secrets-scanner skill integrates seamlessly into your Hermes AI agent workflow. Before pushing code or asking your AI assistant to review sensitive code, run the scanner as a security checkpoint. You can invoke it as a pre-commit skill to automatically scan staged files, or use it interactively when inheriting a new project.&lt;/p&gt;

&lt;p&gt;If you encounter a false positive (like a deliberately exposed example password), simply add &lt;code&gt;secretscan:ignore&lt;/code&gt; in a comment on that line.&lt;/p&gt;

&lt;h2&gt;
  
  
  Getting Started
&lt;/h2&gt;

&lt;p&gt;The skill is available in the &lt;strong&gt;hermes-skills&lt;/strong&gt; open-source repository. It requires only Python 3.8+ with no external dependencies—perfect for CI/CD pipelines and local development workflows alike.&lt;/p&gt;

&lt;p&gt;Whether you're securing a brand-new project or auditing an inherited codebase, env-secrets-scanner gives you peace of mind before every commit.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Ready to keep your secrets safe?&lt;/strong&gt; Star the project at &lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;https://github.com/RobinBeraud/hermes-skills&lt;/a&gt; and add this skill to your workflow today.&lt;/p&gt;

</description>
      <category>hermes</category>
      <category>ai</category>
      <category>automation</category>
      <category>opensource</category>
    </item>
    <item>
      <title>Hermes Skills Just Got a Visual Upgrade—Here's Why That Matters</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Mon, 26 Oct 2026 21:57:36 +0000</pubDate>
      <link>https://dev.to/robinberaud/hermes-skills-just-got-a-visual-upgrade-heres-why-that-matters-2ohk</link>
      <guid>https://dev.to/robinberaud/hermes-skills-just-got-a-visual-upgrade-heres-why-that-matters-2ohk</guid>
      <description>&lt;h2&gt;
  
  
  Making AI Skills Accessible at a Glance
&lt;/h2&gt;

&lt;p&gt;Imagine discovering a powerful open-source AI tool, but the first thing you encounter is a wall of text. No screenshots. No demo. Just documentation. That's the friction the Hermes Skills project just eliminated with a fresh visual update to their README.&lt;/p&gt;

&lt;p&gt;The latest commit to the &lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;hermes-skills&lt;/a&gt; repository adds a professional banner and an animated demo GIF—small changes with a big impact on onboarding and adoption.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why Visual Documentation Matters
&lt;/h2&gt;

&lt;p&gt;Developers are busy. We scan before we read. A well-designed banner immediately communicates what a project is about, while a demo GIF shows working code in action—no installation required. This is especially important for AI agent skills, where users need to understand both the &lt;em&gt;concept&lt;/em&gt; and the &lt;em&gt;result&lt;/em&gt; quickly.&lt;/p&gt;

&lt;p&gt;For the Hermes AI agent ecosystem, this means:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Faster decision-making&lt;/strong&gt;: Contributors can instantly see if a skill solves their problem&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Better first impressions&lt;/strong&gt;: Open-source projects live or die by their README experience&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Clearer use cases&lt;/strong&gt;: A demo GIF speaks louder than a thousand lines of documentation&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  What Are Hermes Skills?
&lt;/h2&gt;

&lt;p&gt;Hermes Skills are modular, composable capabilities for the Hermes AI agent. Think of them as plugins that extend what Hermes can do—from data processing to API integrations, automation tasks, and custom workflows.&lt;/p&gt;

&lt;p&gt;Each skill is designed to be:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight markdown"&gt;&lt;code&gt;✓ Independent and reusable
✓ Well-documented with examples
✓ Easy to integrate into larger agent workflows
✓ Community-driven and open-source
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h2&gt;
  
  
  Getting Started with Hermes Skills
&lt;/h2&gt;

&lt;p&gt;Using Hermes Skills is straightforward:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Browse available skills&lt;/strong&gt; in the repository&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Review the demo&lt;/strong&gt; (now visually!) to confirm it fits your needs&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Follow the setup instructions&lt;/strong&gt; for your specific skill&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Integrate with Hermes&lt;/strong&gt; using the provided API or configuration&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Extend or customize&lt;/strong&gt; as needed for your use case&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;The visual updates make steps 1-2 significantly faster, which compounds across your entire development workflow.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why This Matters for the AI Community
&lt;/h2&gt;

&lt;p&gt;As AI agents become more sophisticated, the ability to compose skills—like building blocks—becomes critical. Projects that prioritize clear documentation and user experience will naturally attract more contributors and users.&lt;/p&gt;

&lt;p&gt;The Hermes Skills project understands this. By investing in visual communication, they're not just improving aesthetics; they're reducing cognitive load for developers evaluating, learning, and building with their tools.&lt;/p&gt;

&lt;h2&gt;
  
  
  Ready to Explore?
&lt;/h2&gt;

&lt;p&gt;If you're working with AI agents, building automations, or looking for reusable skills to power your workflows, Hermes Skills deserves a spot in your toolkit.&lt;/p&gt;

&lt;p&gt;Head over to the project and see what's available:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;&lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;GitHub: RobinBeraud/hermes-skills&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Don't forget to ⭐ the repo if you find it useful—it helps other developers discover this excellent resource!&lt;/p&gt;




&lt;p&gt;&lt;em&gt;Are you building with Hermes or exploring AI agent frameworks? Share your experience in the comments below!&lt;/em&gt;&lt;/p&gt;

</description>
      <category>hermes</category>
      <category>ai</category>
      <category>automation</category>
      <category>opensource</category>
    </item>
    <item>
      <title>Catch Secrets Before They're Committed: Meet the Env-Secrets-Scanner Skill</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Mon, 26 Oct 2026 21:52:05 +0000</pubDate>
      <link>https://dev.to/robinberaud/catch-secrets-before-theyre-committed-meet-the-env-secrets-scanner-skill-73h</link>
      <guid>https://dev.to/robinberaud/catch-secrets-before-theyre-committed-meet-the-env-secrets-scanner-skill-73h</guid>
      <description>&lt;h1&gt;
  
  
  Catch Secrets Before They're Committed: Meet the Env-Secrets-Scanner Skill
&lt;/h1&gt;

&lt;h2&gt;
  
  
  The Problem: Accidental Secret Leaks
&lt;/h2&gt;

&lt;p&gt;One misplaced &lt;code&gt;.env&lt;/code&gt; file, one forgotten API key in a config, and your credentials are in git history forever. Removing them later is painful—you'd need to rewrite commits, force-push, and notify your team. The env-secrets-scanner skill for Hermes AI catches these leaks &lt;em&gt;before&lt;/em&gt; they happen, scanning your project for exposed secrets in seconds.&lt;/p&gt;

&lt;h2&gt;
  
  
  How It Works
&lt;/h2&gt;

&lt;p&gt;The skill uses a lightweight Python scanner (no external dependencies, no API calls) to detect common secret patterns:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Real &lt;code&gt;.env&lt;/code&gt; files&lt;/strong&gt; and key files (&lt;code&gt;.pem&lt;/code&gt;, &lt;code&gt;.key&lt;/code&gt;, &lt;code&gt;id_rsa&lt;/code&gt;)&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Private key blocks&lt;/strong&gt; and tokens (GitHub, Slack, Stripe, AWS, Google API, JWT)&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Credentials in URLs&lt;/strong&gt; like &lt;code&gt;https://user:password@database.com&lt;/code&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Assignments&lt;/strong&gt; such as &lt;code&gt;api_key = "sk_live_..."&lt;/code&gt; or &lt;code&gt;TOKEN=secret&lt;/code&gt;
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;It intelligently skips safe files like &lt;code&gt;.env.example&lt;/code&gt; and &lt;code&gt;.env.sample&lt;/code&gt;, and ignores common build folders (&lt;code&gt;.git&lt;/code&gt;, &lt;code&gt;node_modules&lt;/code&gt;, &lt;code&gt;venv&lt;/code&gt;).&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="c"&gt;# Scan your entire project&lt;/span&gt;
python3 scripts/scan_secrets.py /path/to/project

&lt;span class="c"&gt;# Or just what's staged for commit&lt;/span&gt;
python3 scripts/scan_secrets.py /path/to/repo &lt;span class="nt"&gt;--staged&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h2&gt;
  
  
  The Safety Angle: Masked Output
&lt;/h2&gt;

&lt;p&gt;Here's the clever part—all findings are &lt;strong&gt;masked&lt;/strong&gt; in the report. Instead of showing your actual API key, it displays something like &lt;code&gt;sk_live_****&lt;/code&gt;. This means you can safely share scan results in a Slack message, GitHub issue, or support ticket without exposing credentials.&lt;/p&gt;

&lt;h2&gt;
  
  
  Using It with Hermes
&lt;/h2&gt;

&lt;p&gt;Integrate env-secrets-scanner into your Hermes workflow to automate security checks:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Ask Hermes to scan a project before deployment&lt;/li&gt;
&lt;li&gt;Use it as a pre-commit hook to block unsafe commits&lt;/li&gt;
&lt;li&gt;Run it on inherited codebases to audit for leaks&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Exit codes make it perfect for automation: &lt;code&gt;0&lt;/code&gt; (clean), &lt;code&gt;1&lt;/code&gt; (findings), &lt;code&gt;2&lt;/code&gt; (error). Chain it into CI/CD or pre-commit workflows seamlessly.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why It Matters
&lt;/h2&gt;

&lt;p&gt;Security shouldn't require third-party services or API keys. This skill runs entirely offline with Python's standard library, making it fast, portable, and trustworthy. Whether you're working solo or across a team, catching secrets before they hit git history saves hours of damage control.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Ready to add security to your workflow?&lt;/strong&gt; Check out the env-secrets-scanner skill and more at &lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;https://github.com/RobinBeraud/hermes-skills&lt;/a&gt; — and don't forget to star the repo!&lt;/p&gt;

</description>
      <category>hermes</category>
      <category>ai</category>
      <category>automation</category>
      <category>opensource</category>
    </item>
    <item>
      <title>Catch leaked secrets before `git push`, with one stdlib Python file</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Mon, 26 Oct 2026 21:51:53 +0000</pubDate>
      <link>https://dev.to/robinberaud/catch-leaked-secrets-before-git-push-with-one-stdlib-python-file-3kak</link>
      <guid>https://dev.to/robinberaud/catch-leaked-secrets-before-git-push-with-one-stdlib-python-file-3kak</guid>
      <description>&lt;p&gt;Everyone has a story about an API key that landed in a public repo. Usually it is not carelessness: a &lt;code&gt;.env&lt;/code&gt; file was not in &lt;code&gt;.gitignore&lt;/code&gt; yet, or a quick test left a password in a config file, and &lt;code&gt;git add -A&lt;/code&gt; did the rest.&lt;/p&gt;

&lt;p&gt;Dedicated scanners exist, but sometimes you just want a fast local check with no install, no account and no network. So I wrote the &lt;code&gt;env-secrets-scanner&lt;/code&gt; skill for Hermes Agent. It ships a single Python script using only the standard library.&lt;/p&gt;

&lt;p&gt;It walks a folder (or just your staged files), flags real &lt;code&gt;.env&lt;/code&gt; files while ignoring &lt;code&gt;.env.example&lt;/code&gt;, and matches common token formats: private key blocks, AWS key IDs, GitHub and Slack tokens, JWTs, passwords inside connection URLs, and suspicious &lt;code&gt;password = "..."&lt;/code&gt; style assignments. Placeholders like &lt;code&gt;your_key_here&lt;/code&gt; are skipped. Output is masked (&lt;code&gt;k8J*****41&lt;/code&gt;), so the report is safe to share.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;python3 scripts/scan_secrets.py &lt;span class="nb"&gt;.&lt;/span&gt; &lt;span class="nt"&gt;--staged&lt;/span&gt;
&lt;span class="c"&gt;# .env:0  [env-file]  (file name)&lt;/span&gt;
&lt;span class="c"&gt;# cfg.py:1  [generic-assignment]  k8J*****41&lt;/span&gt;
&lt;span class="c"&gt;# 2 finding(s)&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;The exit code is 1 when something is found, so it drops straight into a pre-commit hook.&lt;/p&gt;

&lt;p&gt;It is a pattern matcher: it can miss exotic formats, does not read git history, and does not check whether a key is still valid. Treat it as a safety net before the commit, and rotate anything that already leaked.&lt;/p&gt;

&lt;p&gt;Skill (MIT): the hermes-skills library.&lt;/p&gt;




&lt;p&gt;Skill (MIT): &lt;a href="https://github.com/RobinBeraud/hermes-skills/tree/main/security/env-secrets-scanner" rel="noopener noreferrer"&gt;https://github.com/RobinBeraud/hermes-skills/tree/main/security/env-secrets-scanner&lt;/a&gt;&lt;br&gt;
All skills: &lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;https://github.com/RobinBeraud/hermes-skills&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;This post was written with AI assistance and reviewed through automated checks.&lt;/em&gt;&lt;/p&gt;

</description>
      <category>hermesagent</category>
      <category>ai</category>
      <category>opensource</category>
      <category>security</category>
    </item>
    <item>
      <title>Automated Skill Validation for Hermes AI: Ensuring Quality Open-Source AI Skills</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Mon, 26 Oct 2026 21:48:12 +0000</pubDate>
      <link>https://dev.to/robinberaud/automated-skill-validation-for-hermes-ai-ensuring-quality-open-source-ai-skills-29p5</link>
      <guid>https://dev.to/robinberaud/automated-skill-validation-for-hermes-ai-ensuring-quality-open-source-ai-skills-29p5</guid>
      <description>&lt;h1&gt;
  
  
  Automated Skill Validation for Hermes AI: Ensuring Quality Open-Source AI Skills
&lt;/h1&gt;

&lt;h2&gt;
  
  
  The Problem: Maintaining Quality at Scale
&lt;/h2&gt;

&lt;p&gt;Building an open-source repository of AI agent skills is exciting—but it comes with challenges. How do you ensure every contribution maintains consistent quality? How do you catch configuration errors or accidentally committed secrets before they reach production? Manual review doesn't scale, and automated validation is non-negotiable for a trusted AI ecosystem.&lt;/p&gt;

&lt;p&gt;The Hermes Skills project just implemented a solution that validates every pull request automatically, checking skill structure and preventing security issues before they slip through.&lt;/p&gt;

&lt;h2&gt;
  
  
  How It Works
&lt;/h2&gt;

&lt;p&gt;The new CI/CD workflow uses GitHub Actions to run validation checks on every PR. Two key components work together:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;1. Automated Validation Workflow&lt;/strong&gt; (&lt;code&gt;.github/workflows/validate.yml&lt;/code&gt;)&lt;br&gt;
The GitHub Actions workflow triggers on every pull request, orchestrating validation checks without manual intervention.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;2. Skill Validator Tool&lt;/strong&gt; (&lt;code&gt;tools/validate_skills.py&lt;/code&gt;)&lt;br&gt;
This Python utility performs two critical checks:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Structural Validation&lt;/strong&gt;: Ensures skills follow the required format and schema&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Secrets Detection&lt;/strong&gt;: Scans for hardcoded API keys, tokens, and sensitive credentials&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;When a contributor opens a PR with a new skill, the validator runs instantly. If issues are found, the PR gets feedback immediately. No broken or insecure skills make it into the main branch.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight yaml"&gt;&lt;code&gt;&lt;span class="c1"&gt;# Skills must follow the schema:&lt;/span&gt;
&lt;span class="pi"&gt;{&lt;/span&gt;
  &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="s"&gt;name"&lt;/span&gt;&lt;span class="pi"&gt;:&lt;/span&gt; &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="s"&gt;skill-name"&lt;/span&gt;&lt;span class="pi"&gt;,&lt;/span&gt;
  &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="s"&gt;description"&lt;/span&gt;&lt;span class="pi"&gt;:&lt;/span&gt; &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="s"&gt;What&lt;/span&gt;&lt;span class="nv"&gt; &lt;/span&gt;&lt;span class="s"&gt;this&lt;/span&gt;&lt;span class="nv"&gt; &lt;/span&gt;&lt;span class="s"&gt;skill&lt;/span&gt;&lt;span class="nv"&gt; &lt;/span&gt;&lt;span class="s"&gt;does"&lt;/span&gt;&lt;span class="pi"&gt;,&lt;/span&gt;
  &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="s"&gt;version"&lt;/span&gt;&lt;span class="pi"&gt;:&lt;/span&gt; &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="s"&gt;1.0.0"&lt;/span&gt;&lt;span class="pi"&gt;,&lt;/span&gt;
  &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="s"&gt;parameters"&lt;/span&gt;&lt;span class="pi"&gt;:&lt;/span&gt; &lt;span class="pi"&gt;[&lt;/span&gt;&lt;span class="nv"&gt;...&lt;/span&gt;&lt;span class="pi"&gt;],&lt;/span&gt;
  &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="s"&gt;handler"&lt;/span&gt;&lt;span class="pi"&gt;:&lt;/span&gt; &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="s"&gt;module.function"&lt;/span&gt;
&lt;span class="pi"&gt;}&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h2&gt;
  
  
  Why This Matters for Hermes AI Users
&lt;/h2&gt;

&lt;p&gt;When you use Hermes AI with community skills, you want confidence. This validation ensures:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Reliability&lt;/strong&gt;: Malformed skills won't break your agent&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Security&lt;/strong&gt;: No accidental credential leaks in shared code&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Consistency&lt;/strong&gt;: All skills follow the same standards&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Trust&lt;/strong&gt;: Community contributions are pre-vetted&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Hermes AI agent developers can now safely extend their agents with third-party skills, knowing each one has passed automated quality gates.&lt;/p&gt;

&lt;h2&gt;
  
  
  Contributing to Hermes Skills
&lt;/h2&gt;

&lt;p&gt;If you're building skills for Hermes AI, this validation makes contribution smoother:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Push your skill in a PR&lt;/li&gt;
&lt;li&gt;Get instant feedback from the validator&lt;/li&gt;
&lt;li&gt;Fix any issues and push again&lt;/li&gt;
&lt;li&gt;Once validation passes, maintainers review your code&lt;/li&gt;
&lt;li&gt;Merge and ship!&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;No more "why did my PR get rejected?" moments—the validator tells you exactly what needs fixing.&lt;/p&gt;

&lt;h2&gt;
  
  
  Join the Movement
&lt;/h2&gt;

&lt;p&gt;Hermes Skills is building the foundation for trustworthy, community-driven AI agent capabilities. Every validated skill makes Hermes AI more powerful and reliable.&lt;/p&gt;

&lt;p&gt;Interested in contributing? Want to build skills that thousands of developers will use? Check out the repository and see what's possible.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Star the repo and join the community:&lt;/strong&gt; &lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;https://github.com/RobinBeraud/hermes-skills&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;The future of AI agents is collaborative—let's build it together.&lt;/p&gt;

</description>
      <category>hermes</category>
      <category>ai</category>
      <category>automation</category>
      <category>opensource</category>
    </item>
    <item>
      <title>Two new Hermes Agent skills: a keyless research router and hand-drawn diagrams for social posts</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Mon, 26 Oct 2026 20:58:11 +0000</pubDate>
      <link>https://dev.to/robinberaud/two-new-hermes-agent-skills-a-keyless-research-router-and-hand-drawn-diagrams-for-social-posts-3o23</link>
      <guid>https://dev.to/robinberaud/two-new-hermes-agent-skills-a-keyless-research-router-and-hand-drawn-diagrams-for-social-posts-3o23</guid>
      <description>&lt;p&gt;The open-source skills library for Hermes Agent just grew to 28 skills. Two new ones this week:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Data Intelligence Router.&lt;/strong&gt; One keyless adapter (&lt;code&gt;dataapi.py&lt;/code&gt;) to query open data sources (OpenAlex, Crossref, arXiv, World Bank, ECB, Wikipedia, NVD, Open Library...) and get the same normalized JSON every time: provider, query, retrieval date, source URL, cache flag. The skill adds routing rules (which source for which question), cross-checking, and a hard rule: say what is a preprint, what is delayed data, and never claim "real time" on free feeds.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Note Visual.&lt;/strong&gt; Minimalist hand-drawn style diagrams (compare, 2x2 matrix, funnel, steps) generated with Pillow, so every word is exact, unlike image models. Perfect as the picture of a one-line post on Substack Notes or LinkedIn. They are illustrations of concepts, never invented data.&lt;/p&gt;

&lt;p&gt;Also in this update: a fixed &lt;code&gt;waitlister&lt;/code&gt; skill and an updated README.&lt;/p&gt;

&lt;p&gt;Repo: &lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;https://github.com/RobinBeraud/hermes-skills&lt;/a&gt; (MIT). Contributions welcome via pull request.&lt;/p&gt;

</description>
      <category>hermesagent</category>
      <category>ai</category>
      <category>opensource</category>
      <category>productivity</category>
    </item>
    <item>
      <title>Automate Your X/Twitter Workflow with Hermes Tweet: A New AI Agent Skill</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Sun, 05 Jul 2026 15:33:56 +0000</pubDate>
      <link>https://dev.to/robinberaud/automate-your-xtwitter-workflow-with-hermes-tweet-a-new-ai-agent-skill-1ko7</link>
      <guid>https://dev.to/robinberaud/automate-your-xtwitter-workflow-with-hermes-tweet-a-new-ai-agent-skill-1ko7</guid>
      <description>&lt;h1&gt;
  
  
  Automate Your X/Twitter Workflow with Hermes Tweet: A New AI Agent Skill
&lt;/h1&gt;

&lt;h2&gt;
  
  
  The Problem: Manual Social Media Monitoring Wastes Time
&lt;/h2&gt;

&lt;p&gt;Managing X/Twitter presence at scale is exhausting. Whether you're monitoring brand mentions, researching competitor activity, or managing community engagement, doing it manually drains productivity. What if your AI agent could handle Twitter research, monitoring, and approved actions automatically?&lt;/p&gt;

&lt;p&gt;That's exactly what &lt;strong&gt;Hermes Tweet&lt;/strong&gt; solves—a new marketing skill for the Hermes AI agent that brings X/Twitter automation directly into your AI workflows.&lt;/p&gt;

&lt;h2&gt;
  
  
  Introducing Hermes Tweet
&lt;/h2&gt;

&lt;p&gt;Hermes Tweet (version 0.1.6) is an open-source skill developed by Xquik that extends Hermes Agent with powerful Twitter/X capabilities. It lets your AI agent:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Search and explore tweets&lt;/strong&gt; with native Twitter search&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Read tweet replies and details&lt;/strong&gt; for deeper context&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Look up user profiles&lt;/strong&gt; and analytics&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Monitor tweet activity&lt;/strong&gt; in real-time&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Export followers&lt;/strong&gt; for analysis&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Gate X actions&lt;/strong&gt; through Xquik's secure API&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  How It Works
&lt;/h2&gt;

&lt;p&gt;Hermes Tweet uses three core tools under the hood:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;tweet_explore    → Search tweets and discover content
tweet_read       → Fetch tweet details and reply threads
tweet_action     → Execute approved X/Twitter actions
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;The skill requires network access and environment variables for authentication:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;XQUIK_API_KEY                    &lt;span class="c"&gt;# Your Xquik API credentials&lt;/span&gt;
HERMES_TWEET_ENABLE_ACTIONS      &lt;span class="c"&gt;# Enable/disable actions&lt;/span&gt;
HERMES_ENABLE_PROJECT_PLUGINS    &lt;span class="c"&gt;# Allow trusted plugins&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h2&gt;
  
  
  Getting Started with Hermes Agent
&lt;/h2&gt;

&lt;p&gt;Installing Hermes Tweet takes just two commands:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;hermes plugins &lt;span class="nb"&gt;install &lt;/span&gt;Xquik-dev/hermes-tweet &lt;span class="nt"&gt;--enable&lt;/span&gt;
hermes tools list
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Then set your &lt;code&gt;XQUIK_API_KEY&lt;/code&gt; in your Hermes runtime environment—never paste it directly in chat.&lt;/p&gt;

&lt;p&gt;Once installed, you can start using natural language prompts with your Hermes Agent:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;em&gt;"Search for tweets mentioning our product launch"&lt;/em&gt;&lt;/li&gt;
&lt;li&gt;&lt;em&gt;"Get replies to this tweet URL"&lt;/em&gt;&lt;/li&gt;
&lt;li&gt;&lt;em&gt;"Find followers of @username"&lt;/em&gt;&lt;/li&gt;
&lt;li&gt;&lt;em&gt;"Monitor mentions of our brand"&lt;/em&gt;&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The skill handles authentication, API routing, and action gating automatically.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why This Matters for AI Automation
&lt;/h2&gt;

&lt;p&gt;Hermes Tweet bridges the gap between general-purpose AI agents and specialized social media workflows. Instead of switching between tools, your Hermes Agent now has native Twitter capabilities—perfect for:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Content teams researching trends&lt;/li&gt;
&lt;li&gt;Community managers monitoring conversations&lt;/li&gt;
&lt;li&gt;Marketing analysts tracking campaign performance&lt;/li&gt;
&lt;li&gt;Growth teams discovering influencers&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The skill is MIT-licensed and actively maintained by the Xquik team.&lt;/p&gt;

&lt;h2&gt;
  
  
  Ready to Automate?
&lt;/h2&gt;

&lt;p&gt;Hermes Tweet is now part of the official Hermes skills collection. Check out the full implementation and contribute:&lt;/p&gt;

&lt;p&gt;⭐ &lt;strong&gt;&lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;Star the Hermes Skills repo&lt;/a&gt;&lt;/strong&gt; to stay updated on new AI agent capabilities.&lt;/p&gt;

&lt;p&gt;Get started today and let your AI agent handle the Twitter grunt work.&lt;/p&gt;

</description>
      <category>hermes</category>
      <category>ai</category>
      <category>automation</category>
      <category>opensource</category>
    </item>
    <item>
      <title>Cleaning Up Personal References: How Hermes Skills Maintains Security Best Practices</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Thu, 02 Jul 2026 12:50:35 +0000</pubDate>
      <link>https://dev.to/robinberaud/cleaning-up-personal-references-how-hermes-skills-maintains-security-best-practices-28kj</link>
      <guid>https://dev.to/robinberaud/cleaning-up-personal-references-how-hermes-skills-maintains-security-best-practices-28kj</guid>
      <description>&lt;h1&gt;
  
  
  Cleaning Up Personal References: How Hermes Skills Maintains Security Best Practices
&lt;/h1&gt;

&lt;p&gt;Security in open-source projects isn't just about cryptography and authentication—it's also about preventing accidental exposure of personal data. The Hermes Skills repository just completed a comprehensive security audit, removing lingering personal references that could compromise user privacy.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Problem: Hidden Personal Data in Documentation
&lt;/h2&gt;

&lt;p&gt;When teams iterate quickly on documentation and examples, personal details can slip through: email addresses in config files, usernames in screenshots, internal URLs, or hardcoded identifiers. While these might seem harmless, they create security vectors and violate privacy principles. The recent cleanup across &lt;code&gt;voxtral-tts&lt;/code&gt;, &lt;code&gt;neuronwriter&lt;/code&gt;, and other skills demonstrates a mature approach to open-source maintenance.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Changed
&lt;/h2&gt;

&lt;p&gt;The commit focused on three skill modules:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;media/voxtral-tts&lt;/strong&gt;: Mistral's voice cloning API documentation now uses sanitized voice ID examples&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;seo/neuronwriter&lt;/strong&gt;: NeuronWriter integration now removes any site-specific URLs or internal references&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;README.md&lt;/strong&gt;: Updated to reflect these changes across the board&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;These aren't breaking changes—they're hygiene improvements that make the codebase safer for everyone.&lt;/p&gt;

&lt;h2&gt;
  
  
  Best Practices for Your Own Projects
&lt;/h2&gt;

&lt;p&gt;If you maintain open-source tools, here's what you can learn:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Audit documentation regularly&lt;/strong&gt;: Search for domain names, email patterns, and UUIDs that might be personal&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Use placeholder syntax&lt;/strong&gt;: Replace real values with clearly marked placeholders like &lt;code&gt;$YOUR_API_KEY&lt;/code&gt; or &lt;code&gt;your-domain.com&lt;/code&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Review before publishing&lt;/strong&gt;: Have a checklist: Are there hardcoded URLs? Environment variables? User IDs?&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Make it reproducible&lt;/strong&gt;: Ensure examples work for &lt;em&gt;anyone&lt;/em&gt; without requiring personal configuration&lt;/li&gt;
&lt;/ol&gt;

&lt;h2&gt;
  
  
  How This Improves Hermes Skills
&lt;/h2&gt;

&lt;p&gt;Hermes AI agent users benefit from cleaner, more portable skill definitions. When you integrate the &lt;code&gt;voxtral-tts&lt;/code&gt; skill for voice cloning or &lt;code&gt;neuronwriter&lt;/code&gt; for SEO optimization, you're working with documentation that prioritizes your privacy while maintaining complete functionality.&lt;/p&gt;

&lt;p&gt;The skills still do everything they did before—generate speech with Mistral's API, analyze SEO with NeuronWriter—but now they do it without exposing anyone's personal infrastructure.&lt;/p&gt;

&lt;h2&gt;
  
  
  Next Steps
&lt;/h2&gt;

&lt;p&gt;If you use Hermes Skills or contribute to the project, you'll notice smoother integration with fewer configuration gotchas. Documentation is now truly generic and reusable.&lt;/p&gt;

&lt;p&gt;Want to see the full scope of available skills? Check out the repository and star it if you find it useful:&lt;/p&gt;

&lt;p&gt;⭐ &lt;strong&gt;&lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;github.com/RobinBeraud/hermes-skills&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Security through simplicity. That's the Hermes way.&lt;/p&gt;

</description>
      <category>hermes</category>
      <category>ai</category>
      <category>security</category>
      <category>opensource</category>
    </item>
    <item>
      <title>Hermes AI Skills Just Got More Secure: Personal Data Removed from Published Skills</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Thu, 02 Jul 2026 12:48:24 +0000</pubDate>
      <link>https://dev.to/robinberaud/hermes-ai-skills-just-got-more-secure-personal-data-removed-from-published-skills-d3p</link>
      <guid>https://dev.to/robinberaud/hermes-ai-skills-just-got-more-secure-personal-data-removed-from-published-skills-d3p</guid>
      <description>&lt;h2&gt;
  
  
  The Problem
&lt;/h2&gt;

&lt;p&gt;When building open-source AI agent skills, it's easy to accidentally expose sensitive information in documentation—API keys, personal model IDs, user emails, or custom configuration details. Once published to a repository, this data becomes a security liability for anyone using your skills.&lt;/p&gt;

&lt;p&gt;The Hermes AI agent community just took a major step toward fixing this with a significant security push across seven popular skills.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Changed
&lt;/h2&gt;

&lt;p&gt;A recent commit to the &lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;hermes-skills repository&lt;/a&gt; removed all personal and sensitive data from published skill documentation. Skills affected include:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;marketing/waitlister&lt;/strong&gt; — removed example waitlist keys and personal URLs&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;media/photogpt&lt;/strong&gt; — stripped personal model IDs&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;media/voxtral-tts&lt;/strong&gt; — cleaned up voice clone references&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;media/youtube-content&lt;/strong&gt; — removed example channel data&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;productivity/mural&lt;/strong&gt; — eliminated workspace identifiers&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;seo/neuronwriter&lt;/strong&gt; — removed project-specific credentials&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;wordpress/wpbakery&lt;/strong&gt; — scrubbed site-specific URLs&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Why This Matters
&lt;/h2&gt;

&lt;p&gt;Each skill's documentation now uses placeholder variables (like &lt;code&gt;$YOUR_API_KEY&lt;/code&gt;, &lt;code&gt;YOUR_WAITLIST_KEY&lt;/code&gt;) instead of real values. This pattern:&lt;/p&gt;

&lt;p&gt;✅ Prevents accidental credential leaks&lt;br&gt;&lt;br&gt;
✅ Makes it clearer where users need to insert their own data&lt;br&gt;&lt;br&gt;
✅ Reduces social engineering attack surface&lt;br&gt;&lt;br&gt;
✅ Follows security best practices for open-source projects  &lt;/p&gt;
&lt;h2&gt;
  
  
  How It Works with Hermes
&lt;/h2&gt;

&lt;p&gt;When you use a skill with the Hermes AI agent, it reads credentials from your local environment (typically &lt;code&gt;~/.hermes/.env&lt;/code&gt;). The documentation now explicitly guides you to store sensitive data there:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="c"&gt;# In ~/.hermes/.env&lt;/span&gt;
&lt;span class="nv"&gt;WAITLISTER_API_KEY&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;your_actual_key_here
&lt;span class="nv"&gt;PHOTOGPT_API_KEY&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;your_actual_key_here
&lt;span class="nv"&gt;MURAL_ACCESS_TOKEN&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;your_actual_token_here
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Then skills reference these variables without exposing them in git history or public documentation.&lt;/p&gt;

&lt;h2&gt;
  
  
  What You Should Do
&lt;/h2&gt;

&lt;p&gt;If you're using any of these skills:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Pull the latest changes&lt;/strong&gt; — &lt;code&gt;git pull&lt;/code&gt; to get the security update&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Review your &lt;code&gt;.env&lt;/code&gt; file&lt;/strong&gt; — ensure all credentials are stored locally, not in code&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Check your git history&lt;/strong&gt; — if you've forked the repo, verify no secrets were committed&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Update your skill configs&lt;/strong&gt; — replace any hardcoded values with environment variable references&lt;/li&gt;
&lt;/ol&gt;

&lt;h2&gt;
  
  
  Contributing Secure Skills
&lt;/h2&gt;

&lt;p&gt;If you're building new skills for Hermes, this commit sets the standard:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Use environment variables for all credentials&lt;/li&gt;
&lt;li&gt;Document &lt;em&gt;how&lt;/em&gt; to find/generate API keys, but never include examples of real keys&lt;/li&gt;
&lt;li&gt;Use placeholder names that make it obvious what needs replacing&lt;/li&gt;
&lt;li&gt;Store sensitive docs in private wikis, not public repositories&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;This is a great reminder that security in open-source isn't just about code—documentation matters too.&lt;/p&gt;

&lt;h2&gt;
  
  
  Get Involved
&lt;/h2&gt;

&lt;p&gt;The Hermes AI agent is built by the community. If you've spotted other sensitive data in skills or want to contribute a new skill securely, check out the repository and help strengthen the ecosystem.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;&lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;⭐ Star hermes-skills on GitHub&lt;/a&gt;&lt;/strong&gt; to stay updated on security improvements and new skill releases.&lt;/p&gt;

</description>
      <category>hermes</category>
      <category>ai</category>
      <category>automation</category>
      <category>opensource</category>
    </item>
    <item>
      <title>4 New Skills for Hermes AI: Email Marketing, DNS Management, YouTube Moderation &amp; SEO Automation</title>
      <dc:creator>Robin Beraud-Sudreau</dc:creator>
      <pubDate>Wed, 01 Jul 2026 16:11:37 +0000</pubDate>
      <link>https://dev.to/robinberaud/4-new-skills-for-hermes-ai-email-marketing-dns-management-youtube-moderation-seo-automation-1pkf</link>
      <guid>https://dev.to/robinberaud/4-new-skills-for-hermes-ai-email-marketing-dns-management-youtube-moderation-seo-automation-1pkf</guid>
      <description>&lt;h1&gt;
  
  
  4 New Skills for Hermes AI: Email Marketing, DNS Management, YouTube Moderation &amp;amp; SEO Automation
&lt;/h1&gt;

&lt;p&gt;The Hermes AI agent just leveled up. Four fresh open-source skills are now available to automate email campaigns, manage your DNS infrastructure, moderate YouTube comments, and continuously optimize WordPress sites for search engines.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Problem
&lt;/h2&gt;

&lt;p&gt;Managing multiple platforms drains time and focus. You're juggling SendFox for newsletters, Gandi for domains, YouTube's comment section, and SEO tools scattered across different tabs. Hermes unifies these workflows into conversational, reusable skills.&lt;/p&gt;

&lt;h2&gt;
  
  
  What's New?
&lt;/h2&gt;

&lt;h3&gt;
  
  
  1. &lt;strong&gt;SendFox&lt;/strong&gt; — Email Marketing Automation
&lt;/h3&gt;

&lt;p&gt;Manage your entire email operation through API calls:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight python"&gt;&lt;code&gt;&lt;span class="nf"&gt;add_contact&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="s"&gt;contact@example.com&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt; &lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="s"&gt;newsletter&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt; &lt;span class="n"&gt;tags&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="p"&gt;[&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="s"&gt;VIP&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="p"&gt;],&lt;/span&gt; &lt;span class="n"&gt;first_name&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="s"&gt;Alice&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt;
&lt;span class="n"&gt;campaign_stats&lt;/span&gt; &lt;span class="o"&gt;=&lt;/span&gt; &lt;span class="nf"&gt;get_campaign_stats&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="n"&gt;campaign_id&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Create lists, segment contacts, launch campaigns, and track opens/clicks—all without leaving your AI agent.&lt;/p&gt;

&lt;h3&gt;
  
  
  2. &lt;strong&gt;Gandi&lt;/strong&gt; — Domain &amp;amp; DNS Management
&lt;/h3&gt;

&lt;p&gt;Stop logging into Gandi's dashboard. Ask Hermes instead:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight python"&gt;&lt;code&gt;&lt;span class="n"&gt;domains&lt;/span&gt; &lt;span class="o"&gt;=&lt;/span&gt; &lt;span class="nf"&gt;gandi&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="s"&gt;GET&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt; &lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="s"&gt;domain/domains&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt;
&lt;span class="n"&gt;records&lt;/span&gt; &lt;span class="o"&gt;=&lt;/span&gt; &lt;span class="nf"&gt;gandi&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="s"&gt;GET&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt; &lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="s"&gt;livedns/domains/example.com/records&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;List domains, check expiration dates, modify DNS records, configure email redirections, and verify your infrastructure—all programmatically.&lt;/p&gt;

&lt;h3&gt;
  
  
  3. &lt;strong&gt;YouTube Comment Management&lt;/strong&gt; — Moderation &amp;amp; SEO Linking
&lt;/h3&gt;

&lt;p&gt;Stay on top of YouTube comments with:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;code&gt;yt_cm_pending.py&lt;/code&gt; — Find unanswered comments across your channel&lt;/li&gt;
&lt;li&gt;
&lt;code&gt;yt_cm_act.py&lt;/code&gt; — Reply or reject comments in bulk&lt;/li&gt;
&lt;li&gt;Built-in SEO interlinking to WordPress sites&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The skill handles the critical &lt;code&gt;youtube.force-ssl&lt;/code&gt; scope requirement so you can actually authenticate and moderate at scale.&lt;/p&gt;

&lt;h3&gt;
  
  
  4. &lt;strong&gt;SEO Optimizer&lt;/strong&gt; — Continuous Content Improvement
&lt;/h3&gt;

&lt;p&gt;A two-loop system that:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Optimizes existing pages&lt;/strong&gt; — Fetches your Google Search Console data, identifies high-potential pages, scores them with NeuronWriter, improves content with Claude, and auto-publishes via WordPress.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Creates new articles&lt;/strong&gt; — Detects genuinely searched topics and generates fresh content on demand.
&lt;/li&gt;
&lt;/ol&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;Run daily: 3 pages → NeuronWriter analysis → Content improvement → Live
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h2&gt;
  
  
  How to Use with Hermes
&lt;/h2&gt;

&lt;p&gt;Each skill is drop-in ready. Just set your API keys in &lt;code&gt;.env&lt;/code&gt;:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight properties"&gt;&lt;code&gt;&lt;span class="py"&gt;SENDFOX_API_KEY&lt;/span&gt;&lt;span class="p"&gt;=&lt;/span&gt;&lt;span class="s"&gt;your_key&lt;/span&gt;
&lt;span class="py"&gt;GANDI_API_TOKEN&lt;/span&gt;&lt;span class="p"&gt;=&lt;/span&gt;&lt;span class="s"&gt;your_token&lt;/span&gt;
&lt;span class="py"&gt;NEURONWRITER_API_KEY&lt;/span&gt;&lt;span class="p"&gt;=&lt;/span&gt;&lt;span class="s"&gt;your_key&lt;/span&gt;
&lt;span class="py"&gt;GSC_TOKEN&lt;/span&gt;&lt;span class="p"&gt;=&lt;/span&gt;&lt;span class="s"&gt;path/to/token.json&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Then talk to Hermes naturally:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;"Add &lt;a href="mailto:alice@example.com"&gt;alice@example.com&lt;/a&gt; to my VIP list in SendFox"&lt;/li&gt;
&lt;li&gt;"What's the expiration date of my domains?"&lt;/li&gt;
&lt;li&gt;"Show me unanswered YouTube comments from the last week"&lt;/li&gt;
&lt;li&gt;"Run my daily SEO optimization cycle"&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Hermes handles authentication, pagination, error handling, and rate limits transparently.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why This Matters
&lt;/h2&gt;

&lt;p&gt;These aren't fancy wrappers—they're battle-tested integrations built to solve real workflow friction. The YouTube skill, for example, documents critical gotchas like scope requirements and token-swapping behavior. The SEO skill integrates &lt;em&gt;four different systems&lt;/em&gt; (GSC, NeuronWriter, Claude, WordPress) into a cohesive daily routine.&lt;/p&gt;

&lt;h2&gt;
  
  
  Get Started
&lt;/h2&gt;

&lt;p&gt;All four skills are open-source and ready to use. Check out the repo, explore the skill definitions, and start automating:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;&lt;a href="https://github.com/RobinBeraud/hermes-skills" rel="noopener noreferrer"&gt;Star the hermes-skills repo →&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;If you build something cool with these skills, share it in the comments. The community is growing, and every integration makes Hermes smarter.&lt;/p&gt;

</description>
      <category>hermes</category>
      <category>ai</category>
      <category>automation</category>
      <category>opensource</category>
    </item>
  </channel>
</rss>
