Files
hermes-agent/website/docs/reference/optional-skills-catalog.md
Hermes Agent bdbdfead04 fix(security): remove blender MCP catalog entry and skill after upstream compromise
The upstream ahujasid/blender-mcp and ahujasid/ableton-mcp GitHub repos
were hijacked on 2026-08-08: the maintainer (@sidahuj) publicly reported
his account was compromised and ownership stripped, and both repos now
redirect to an attacker-controlled org (MCPBlender, created the same
day, pushing new commits since).

Although our catalog pinned blender-mcp==1.6.4 from PyPI (pre-compromise,
sha256 verified unchanged), the server is only half the bridge: the
manifest's post-install instructions and the optional skill directed
users to download addon.py — arbitrary Python executed inside Blender —
from the now-compromised GitHub repo (the raw URL currently 404s, and
the addon ships in no PyPI artifact). There is no trustworthy source
for the addon half, so the entry cannot be installed safely end-to-end.

Removing the catalog entry and skill entirely until the maintainer
confirms account recovery; re-adding is a follow-up PR once upstream
is verified clean.

- optional-mcps/blender/: removed
- optional-skills/creative/blender-mcp/: removed
- docs: catalog rows, sidebar entry, skill pages (en + zh-Hans) removed
- cross-references in unreal-mcp and kanban-video-orchestrator cleaned
2026-08-10 12:12:11 -07:00

19 KiB
Raw Blame History

sidebar_position, title, description
sidebar_position title description
9 Optional Skills Catalog Official optional skills shipped with hermes-agent — install via hermes skills install official/<category>/<skill>

Optional Skills Catalog

Optional skills ship with hermes-agent under optional-skills/ but are not active by default. Install them explicitly:

hermes skills install official/<category>/<skill>

For example:

hermes skills install official/blockchain/solana
hermes skills install official/mlops/flash-attention

Each skill below links to a dedicated page with its full definition, setup, and usage.

To uninstall:

hermes skills uninstall <skill-name>

autonomous-ai-agents

Skill Description
antigravity-cli Operate the Antigravity CLI (agy): plugins, auth, sandbox.
blackbox Delegate coding tasks to the Blackbox AI multi-model CLI.
grok Delegate coding to xAI Grok Build CLI (features, PRs).
honcho Configure and troubleshoot Honcho memory for Hermes.
openhands Delegate coding to OpenHands CLI (model-agnostic, LiteLLM).

blockchain

Skill Description
evm Read-only EVM client: wallets, tokens, gas across 8 chains.
hyperliquid Hyperliquid market data, account history, trade review.
solana Query Solana wallets, tokens, txs, and NFTs in USD.

communication

Skill Description
one-three-one-rule 1-3-1 decision briefs: problem, three options, one pick.

creative

Skill Description
audiocraft-audio-generation AudioCraft: MusicGen text-to-music, AudioGen text-to-sound.
baoyu-article-illustrator Article illustrations: type × style × palette consistency.
baoyu-comic Knowledge comics (知识漫画): educational, biography, tutorial.
concept-diagrams Generate flat, minimal educational SVG visuals as HTML.
creative-ideation Generate ideas via named methods from creative practice.
heartmula HeartMuLa: Suno-like song generation from lyrics + tags.
hyperframes Render MP4/WebM videos from HTML compositions.
kanban-video-orchestrator Plan and run multi-agent video production pipelines.
meme-generation Create meme PNGs from templates with Pillow text overlay.
pixel-art Pixel art w/ era palettes (NES, Game Boy, PICO-8).
social-media-content-calendar Plan multi-platform social campaigns: briefs to posting.
tldraw-offline Drive and script tldraw offline canvases with an agent.
unreal-mcp Automate Unreal Engine editor scenes, actors, and renders.

data-science

Skill Description
jupyter-notebook Iterative Python via live Jupyter kernel (hamelnb).

devops

Skill Description
actual-setup Set up Actual Computer (actual.inc) inference in Hermes.
docker-management Manage Docker containers, images, volumes, and Compose.
hermes-s6-container-supervision Modify or debug s6 services in the Hermes Docker image.
inference-sh-cli Run 150+ AI apps (image, video, LLM) via inference.sh CLI.
pinggy-tunnel Zero-install localhost tunnels over SSH via Pinggy.
watchers Poll RSS, JSON APIs, and GitHub with watermark dedup.

dogfood

Skill Description
adversarial-ux-test Roleplay a hostile user to find and triage UX pain points.

email

Skill Description
agentmail Give the agent its own inbox: send and receive email.

finance

Skill Description
3-statement-model Build integrated IS/BS/CF financial workbooks in Excel.
comps-analysis Build comparable-company valuation workbooks in Excel.
dcf-model Build discounted cash flow valuation workbooks in Excel.
excel-author Build auditable financial workbooks headless via openpyxl.
lbo-model Build leveraged buyout workbooks with IRR/MOIC in Excel.
merger-model Build M&A accretion/dilution workbooks in Excel.
polymarket Query Polymarket: markets, prices, orderbooks, history.
pptx-author Build PowerPoint decks headless with python-pptx.
stocks Stock quotes, history, search, compare, crypto via Yahoo.

gaming

Skill Description
minecraft-modpack-server Host modded Minecraft servers (CurseForge, Modrinth).
pokemon-player Play Pokemon via headless emulator + RAM reads.

health

Skill Description
fitness-nutrition Workout planning, macros, and body metrics via wger/USDA.
neuroskill-bci Use live BCI cognitive and mood state from NeuroSkill.

mcp

Skill Description
fastmcp Build, test, and deploy Python MCP servers.
mcp-oauth-remote-gateway Manual OAuth for remote MCP servers on headless gateways.
mcporter List, auth, and call MCP servers/tools from the terminal.

migration

Skill Description
openclaw-migration Import an OpenClaw setup (memories, skills) into Hermes.

mlops

Skill Description
accelerate Run PyTorch training across GPUs with minimal changes.
axolotl Axolotl: YAML LLM fine-tuning (LoRA, DPO, GRPO).
chroma Embedding database for RAG and semantic search.
clip Zero-shot image classification and image-text search.
dspy DSPy: declarative LM programs, auto-optimize prompts, RAG.
faiss Fast vector similarity search at billion scale.
flash-attention Speed up long-sequence transformer training and inference.
guidance Constrain LLM output with grammars; guarantee valid JSON.
huggingface-tokenizers Fast BPE/WordPiece tokenization and custom vocab training.
instructor Structured LLM outputs validated with Pydantic.
lambda-labs On-demand GPU cloud instances for ML training.
llava Vision-language chat: VQA, captioning, image dialogue.
modal Serverless GPU cloud for ML jobs and model APIs.
nemo-curator Curate LLM training data: dedupe, filter, PII redaction.
obliteratus OBLITERATUS: abliterate LLM refusals (diff-in-means).
outlines Outlines: structured JSON/regex/Pydantic LLM generation.
peft Fine-tune large LLMs with LoRA on limited GPU memory.
pinecone Managed vector DB for production RAG and search.
pytorch-fsdp Fully sharded data-parallel training for large models.
pytorch-lightning Clean training loops with built-in distributed support.
qdrant Vector search engine for production RAG systems.
saelens Train sparse autoencoders to interpret model features.
segment-anything-model SAM: zero-shot image segmentation via points, boxes, masks.
simpo Reference-free preference alignment, simpler than DPO.
slime RL post-training for LLMs with Megatron and SGLang.
stable-diffusion Text-to-image generation, inpainting, and img2img.
tensorrt-llm High-throughput LLM inference on NVIDIA GPUs.
torchtitan Pretrain LLMs at scale with PyTorch 4D parallelism.
trl-fine-tuning TRL: SFT, DPO, GRPO, RLOO reward modeling for LLM RLHF.
unsloth Unsloth: 2-5x faster LoRA/QLoRA fine-tuning, less VRAM.
whisper Transcribe and translate speech in 99 languages.

payments

Skill Description
mpp-agent Pay HTTP 402 APIs via Machine Payments Protocol (MPP).
stripe-link-cli Agent payments via Stripe Link — cards, SPT, approvals.
stripe-projects Provision SaaS services + sync creds via Stripe Projects.

productivity

Skill Description
canvas Fetch Canvas LMS courses and assignments via API token.
here-now Publish sites to {slug}.here.now and store files in Drives.
memento-flashcards Spaced-repetition flashcards: create, review, quiz, export.
shop Shop catalog search, checkout, order tracking, returns.
shopify Query Shopify Admin/Storefront GraphQL APIs via curl.
siyuan Query and edit a SiYuan knowledge base via its API.
telephony Provision Twilio numbers, SMS/MMS, and AI outbound calls.

research

Skill Description
bioinformatics Gateway to 400+ genomics and computational biology skills.
darwinian-evolver Evolve prompts/regex/SQL/code with Imbue's evolution loop.
domain-intel Passive recon of subdomains, SSL certs, WHOIS, and DNS.
drug-discovery Drug discovery: ChEMBL search, drug-likeness, interactions.
duckduckgo-search Free keyless web, news, and image search via ddgs.
gitnexus-explorer Serve an interactive codebase knowledge graph web UI.
osint-investigation Follow the money via public records and sanctions data.
parallel-cli Agent-native web search, deep research, and enrichment.
pinecone-research Agent RAG and long-term memory with Pinecone.
qmd Hybrid local search over notes, docs, and transcripts.
scrapling Scrape sites with stealth browsing and Cloudflare bypass.
searxng-search Free keyless meta-search aggregating 70+ engines.

security

Skill Description
1password Set up op CLI, sign in, and read or inject secrets.
godmode Jailbreak LLMs: Parseltongue, GODMODE, ULTRAPLINIAN.
oss-forensics GitHub supply-chain forensics: recovery, IOCs, reporting.
sherlock Find accounts for a username across 400+ platforms.
unbroker Autonomously remove your info from data-broker sites.
web-pentest Authorized web pentest: recon, proof-based exploits, report.

software-development

Skill Description
code-wiki Generate wiki docs + Mermaid diagrams for any codebase.
rest-graphql-debug Debug REST/GraphQL APIs: status codes, auth, schemas, repro.
subagent-driven-development Execute plans via delegate_task subagents (2-stage review).

web-development

Skill Description
cloudflare-temporary-deploy Deploy a Worker live, no account, via wrangler --temporary.
page-agent Embed an in-page natural-language GUI copilot in web apps.

yuanbao

Skill Description
yuanbao Yuanbao (元宝) groups: @mention users, query info/members.

Contributing Optional Skills

To add a new optional skill to the repository:

  1. Create a directory under optional-skills/<category>/<skill-name>/
  2. Add a SKILL.md with standard frontmatter (name, description, version, author)
  3. Include any supporting files in references/, templates/, or scripts/ subdirectories
  4. Submit a pull request — the skill will appear in this catalog and get its own docs page once merged