Skip to content

v0.3.1

Latest

Choose a tag to compare

@mojomast mojomast released this 11 Nov 13:25
· 1 commit to main since this release
796a35e

hermes-plugin-dev v0.3.1

Catalog review fix for NousResearch/hermes-agent#152699: hpd_check no longer imports the plugin it is linting.

  • The model-facing hpd_check tool measures schema tokens statically. It parses register_tool schema dicts from the AST and never imports or executes the target, even if the model invents an execute flag.
  • Import-based measurement (register() on a fake host, the same class of execution as hermes plugins doctor) is only available on a user-run CLI: hermes hpd check <dir> --execute (also python hpd_cli.py check <dir> --execute). That path is unsandboxed — only use it on code you trust.
  • Tests cover a malicious __init__.py that is not executed on the tool path, and is executed only with --execute. Static token counts match the import path for this plugin and the hello-hermes template.
  • Schema cost is unchanged: 2 tools, 190 o200k tokens.

Pin this tag's commit (796a35e4d893b985f1b61d8e11b5ae7e4118bf6f) in the catalog entry.