Skip to content

Add Hermes configuration audit skill - #15

Open
o-az wants to merge 8 commits into
mainfrom
feat/auditing-hermes-config
Open

Add Hermes configuration audit skill#15
o-az wants to merge 8 commits into
mainfrom
feat/auditing-hermes-config

Conversation

@o-az

@o-az o-az commented Aug 5, 2026

Copy link
Copy Markdown
Owner

Summary

  • add the reusable Hermes configuration audit skill under the canonical skills publishing layout
  • support explicit target repositories, immutable revision-pinned source evidence, conservative classifications, and safe host snapshots
  • add self-contained fixtures, output schema documentation, and JSON Schema validation

Safety

  • excludes ignored, untracked, and underscore-component source paths
  • keeps cache and reports outside inspected repositories
  • redacts scalar host values and disables import-from-derivation during Nix evaluation
  • reports unsupported dynamic and Nix structures as uncertainty

Verification

  • node --test skills/auditing-hermes-config/tests/*.test.mjs (12 passed)
  • node --check skills/auditing-hermes-config/scripts/hermes-config-audit.mjs
  • npx oxlint skills/auditing-hermes-config/scripts/hermes-config-audit.mjs skills/auditing-hermes-config/tests/audit.test.mjs
  • npx oxfmt --check skills/auditing-hermes-config
  • uvx --from skills-ref agentskills validate skills/auditing-hermes-config

The real nixos-config/Marley integration audit remains intentionally deferred.

@o-az
o-az force-pushed the feat/auditing-hermes-config branch 2 times, most recently from b0250c9 to 0e790e8 Compare August 5, 2026 16:50
Comment thread skills/auditing-hermes-config/scripts/hermes-config-audit.mjs Fixed
Comment thread skills/auditing-hermes-config/scripts/hermes-config-audit.mjs Fixed
Comment thread skills/auditing-hermes-config/scripts/hermes-config-audit.mjs Fixed
Comment thread skills/auditing-hermes-config/scripts/hermes-config-audit.mjs Fixed
Comment thread skills/auditing-hermes-config/scripts/hermes-config-audit.mjs Fixed
Comment thread skills/auditing-hermes-config/scripts/hermes-config-audit.mjs Fixed
Comment thread skills/auditing-hermes-config/scripts/hermes-config-audit.mjs Fixed
Comment thread tests/auditing-hermes-config/audit.test.mjs Fixed
@o-az
o-az force-pushed the feat/auditing-hermes-config branch from 0e790e8 to 5054842 Compare August 5, 2026 18:19
Comment thread tests/auditing-hermes-config/audit.test.mjs Fixed
Comment thread skills/auditing-hermes-config/scripts/hermes-config-audit.mjs Fixed
Comment thread skills/auditing-hermes-config/scripts/hermes-config-audit.mjs Dismissed
@o-az
o-az force-pushed the feat/auditing-hermes-config branch from 542e3f4 to 5f093c6 Compare August 5, 2026 23:54
const absolute = path.resolve(dir),
forbiddenRoots = [target, canonical(SKILLS_REPO), source && canonical(source)].filter(Boolean);
let ancestor = absolute;
while (!fs.existsSync(ancestor)) {
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants