Every entry is pinned to the commit reviewed on 2026-09-15 and passed, at that commit: `hermes plugins validate` (declared tools/hooks/middleware match registrations, no built-in tool collisions) in both the main venv and a bare `pip install -e .` venv, `tools.plugin_guard.scan_plugin` with a non-dangerous verdict, a self-updater grep over every .js file, and a vendor-credential-store write grep over every .py file. Capabilities and requires_env are copied from each plugin.yaml; category was assigned by hand.
15 lines
496 B
YAML
15 lines
496 B
YAML
name: hermes-plugin-guard
|
|
repo: https://github.com/mauricemohr88-debug/hermes-plugin-guard
|
|
sha: 857d881be77249c192c5fefa8254db186a7abbca
|
|
description: Static review of candidate Hermes plugins; target code is never executed.
|
|
maintainer: mauricemohr88-debug
|
|
tier: community
|
|
category: tools
|
|
docs_url: https://github.com/mauricemohr88-debug/hermes-plugin-guard#readme
|
|
capabilities:
|
|
provides_tools:
|
|
- plugin_guard_review_candidate
|
|
provides_hooks: []
|
|
provides_middleware: []
|
|
requires_env: []
|