From 8a86b45f687c7537f3ca338e7b79d2c6a500cc24 Mon Sep 17 00:00:00 2001
From: teknium1 <127238744+teknium1@users.noreply.github.com>
Date: Wed, 23 Sep 2026 10:59:20 -0700
Subject: [PATCH] chore(plugin-catalog): hermes-monitor disclosure (read-only
 DBs, DeepSeek balance with env/.env key)

---
 plugin-catalog/hermes-monitor.yaml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/plugin-catalog/hermes-monitor.yaml b/plugin-catalog/hermes-monitor.yaml
index d4524724f1..6b84237751 100644
--- a/plugin-catalog/hermes-monitor.yaml
+++ b/plugin-catalog/hermes-monitor.yaml
@@ -7,9 +7,7 @@ name: hermes-monitor
 repo: https://github.com/mr-3mm3/hermes-monitor
 sha: "d8e513f47d068755fe6b2ceee25e70e31494378d"   # tag v0.1.0
 version: 0.1.0
-description: Kanban worker health in the Desktop status bar — live activity per running card with
-  stall and loop detection (same tool + same arguments repeated), plus a compact Claude/Codex/DeepSeek
-  quota readout. Read-only access to local Hermes databases; zero model tokens.
+description: "Kanban worker health in the Desktop status bar — live activity per running card with stall and loop detection (same tool + same arguments repeated), plus a compact Claude/Codex/DeepSeek quota readout. Read-only access to local Hermes databases; zero model tokens. Disclosure — read-only: opens HERMES_HOME/kanban.db and each profile's state.db in read-only mode for worker activity; for quota chips calls Hermes' own account-usage fetchers (Anthropic, Codex) and https://api.deepseek.com/user/balance using the DEEPSEEK_API_KEY found in your environment, HERMES_HOME/.env or any profile's .env. No other network egress."
 maintainer: mr-3mm3
 tier: community
 category: desktop