Local Web Security Scan

What Local Web Security Scan does

This repository is a public export prepared from a private Hermes skill named Local Web Security Scan, written mainly in Python. To use it, copy the folder into your Hermes skills directory, or submit it to a skills catalog after running the checks the README lists. The README does not describe individual scan steps, so read the folder's contents before enabling it.

The README is mostly a publishing checklist. It tells maintainers not to commit local runtime files such as .env, state.json, config.json, addresses.conf, logs or debug outputs, and to use the provided example files as templates. Before publishing, it asks for a static skill security scan, a secret and private-marker scan, syntax checks for any scripts, and confirmation that git status --ignored does not show private files as trackable. Those steps describe how the export was prepared rather than what the skill itself scans.

Key features

• Hermes skill packaged as a folder to copy into the skills directory
• Example configuration files provided as templates for local settings
• Publishing checklist covering a static skill scan, a secret scan and syntax checks

When to use it

• Adding a local web security check skill to a Hermes Agent setup
• Following its publishing checklist when exporting your own private skill

Who it is for: Hermes Agent users who want a local web security scanning skill and are willing to review it before enabling it.

How it fits with Hermes Agent

It is a Hermes skill meant to be copied into the Hermes skills directory.

Note: The README is minimal and does not document what the scan checks, so review the skill's contents before enabling it.

FAQ