Analysis internal data safely with Hermes agent and OneQuery

Personal Agents, such as Hermes Agent and OpenClaw, are powerful. They can perform deep analysis on internal data, and the results can be great. But there are safety issues.

1. An agent can read real secret values. If your messaging channel gets hacked and an attacker can prompt your personal agent, they may be able to access your secrets.

2. An agent can update or delete your internal data. As models improve, this may happen less frequently, but we still cannot guarantee it will never happen.

3. An agent can harm your database by making too many calls if you connect it to your production database.

4. Even if you connect it to an analytics database, the agent can run too many queries and cost you a lot.

5. If you use Hermes Agent with your team, you will need to set up role-based access control.

OneQuery

I found that the OneQuery CLI can help address these problems. OneQuery is an open-source project (https://github.com/wordbricks/onequery) that connects to data sources and manages credentials. It is self-hosted, so credentials never leave your local device.

You can find detailed information on their website.

Install it with the script and run onboarding.

$ curl -fsSL https://onequery.dev/install.sh | sh
$ onequery onboard

In the OneQuery web app, click the Integrations tab and connect your data sources. Connect them once, and use them across various projects.

I connected my Supabase database and Amplitude (analysis tool)

Hermes Agent

Hermes Agent is an AI agent that runs mostly locally, like OpenClaw. Setting up Hermes Agent is simple.

$ curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash
$ hermes setup

During setup, you can connect Telegram, Discord, Slack, and other messaging channels. I chose Slack and connected it to Hermes Agent.

Install OneQuery Skill for Hermes Agent

To enable OneQuery in Hermes Agent, we need to install the OneQuery Skill.

hermes skills install skills-sh/wordbricks/skills/onequery-cli --yes --force

Internal data analysis

Now, let's do internal data analysis with Hermes Agent and OneQuery. On Slack, or whichever channel you chose, mention Hermes Agent and ask it for insights.

I asked Hermes to "Report DAU and retention for the exam page over the last 30 days." Then:

By integrating more data sources, Hermes Agent can perform even more powerful and complex work.