From 0873194e52935262176aabe1f715a4e21c0ecb30 Mon Sep 17 00:00:00 2001
From: teknium1 <127238744+teknium1@users.noreply.github.com>
Date: Sat, 19 Sep 2026 02:02:26 -0700
Subject: [PATCH] catalog: add review disclosure line for hermes-loadout
 (review #112742)

---
 plugin-catalog/hermes-loadout.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/plugin-catalog/hermes-loadout.yaml b/plugin-catalog/hermes-loadout.yaml
index eefd108884..2f7ec5ec27 100644
--- a/plugin-catalog/hermes-loadout.yaml
+++ b/plugin-catalog/hermes-loadout.yaml
@@ -5,6 +5,7 @@ description: >-
   Desktop pane to manage skills and MCP connections across agent apps: save
   named loadouts, review changes, apply them, and undo the latest managed
   operation. Agent half is inert (no tools or hooks).
+  Disclosure — MCP sync copies your Hermes mcp_servers env/header secrets into ~/.codex/config.toml and claude_desktop_config.json (with 0600 backups).
 maintainer: qwertyuiop97
 tier: community
 category: desktop