Files
hermes-agent/plugin-catalog/hermes-workflows.yaml
teknium1 9aae3c23e2 fix(plugin-catalog): mark hermes-workflows' /tmp disclosure as deliberate
#131398 added a risk disclosure quoting the plugin's own /tmp handoff
file to the description, and the no-tmp lint (Python lints) went red on
main and on every PR's merge commit. The line documents third-party
behavior; dropping the path would weaken the disclosure, so it gets the
opt-out marker instead.
2026-10-02 21:08:13 -04:00

24 lines
2.4 KiB
YAML

name: hermes-workflows
repo: https://github.com/jacobhausler/hermes-workflows
sha: 54babd82215f9f058f436dc4f047c6dc63750078
# no-tmp: ok — risk disclosure quoting the plugin's own handoff-file path, not a path Hermes writes
description: "Agent-owned workflow graphs for Hermes — a background runner executes a JSON DAG of agent nodes, fan-outs (quorum) and human/machine gates with fingerprint replay-skip resume, cooperative steer, typed failure events and compact status payloads; ships a desktop DAG view, an inline transcript card and the authoring skill with measured budget recipes. Stock Hermes; no patched core required. Disclosure — every workflow run spawns a detached background runner (wf.py run <id>) that survives session end, gateway restart and plugin disable until the graph reaches a boundary or workflow stop; each agent node is a child hermes chat --query-file … --oneshot -Q … inheriting the runner's environment, and a node with profile set runs as that named profile (with its own credentials) only if the target's workflow_team.json lists the launcher; a gate's wait.until_argv runs an agent-authored argv directly from the runner, outside Hermes' tool-approval gate (the engine uses no shell, but the shipped machine-watch and incident-response templates use it to run a shell line read from a /tmp handoff file); run and amend send a one-token ping through Hermes' configured providers to check pinned model routes; the runner reads state.db read-only; state lives under $HERMES_HOME/workflows/ (or a configured runs_root). No scheduler, credential-store access or network of its own."
maintainer: jacobhausler
tier: community
category: automation
requires_hermes: ">=0.21.4"
docs_url: https://github.com/jacobhausler/hermes-workflows#readme
version: "1.1.3"
image: https://raw.githubusercontent.com/jacobhausler/hermes-workflows/54babd82215f9f058f436dc4f047c6dc63750078/assets/dag-review.png
screenshots:
- https://raw.githubusercontent.com/jacobhausler/hermes-workflows/54babd82215f9f058f436dc4f047c6dc63750078/assets/dag-review.png
- https://raw.githubusercontent.com/jacobhausler/hermes-workflows/54babd82215f9f058f436dc4f047c6dc63750078/assets/branch-gate.png
- https://raw.githubusercontent.com/jacobhausler/hermes-workflows/54babd82215f9f058f436dc4f047c6dc63750078/assets/fanout.png
platforms: []
capabilities:
provides_tools:
- workflow
provides_hooks: []
provides_middleware: []
requires_env: []