b57fac00cc
The desktop half is one plugin.js. A sibling locale import is rejected by the Desktop loader, so the composer key never registered.
20 lines
993 B
YAML
20 lines
993 B
YAML
name: secret-drop
|
|
repo: https://github.com/Goitonthefloor/hermes-secret-drop
|
|
sha: 505bd3b47937ae453d4a54a2ee2455a4d274bf42
|
|
description: 'Store a secret on the gateway host without showing it to the model. Disclosure — stores the value in
|
|
plaintext in the profile .env (mode 0600) and adds the name to terminal.env_passthrough, so $NAME is available to the
|
|
terminal tool; the model can still read the value with its own tools (cat .env, echo $NAME). Keeps secrets out of
|
|
chat/prompt context and redacts verbatim output of credential-shaped values; it is not a boundary against a model
|
|
that deliberately reads it. Adds a static system-prompt section and a /secret command. Imports private core helpers
|
|
read-only (_config_profile_scope, _is_hermes_provider_credential, _CONFIG_LOCK).'
|
|
maintainer: Goitonthefloor
|
|
tier: community
|
|
category: desktop
|
|
version: "1.4.0"
|
|
capabilities:
|
|
provides_tools: []
|
|
provides_hooks:
|
|
- on_session_start
|
|
provides_middleware: []
|
|
requires_env: []
|