Repository navigation
hermes-plugin-dev v0.3.1
Catalog review fix for NousResearch/hermes-agent#152699: hpd_check no longer imports the plugin it is linting.
- The model-facing
hpd_checktool measures schema tokens statically. It parsesregister_toolschema dicts from the AST and never imports or executes the target, even if the model invents anexecuteflag. - Import-based measurement (
register()on a fake host, the same class of execution ashermes plugins doctor) is only available on a user-run CLI:hermes hpd check <dir> --execute(alsopython hpd_cli.py check <dir> --execute). That path is unsandboxed — only use it on code you trust. - Tests cover a malicious
__init__.pythat is not executed on the tool path, and is executed only with--execute. Static token counts match the import path for this plugin and the hello-hermes template. - Schema cost is unchanged: 2 tools, 190 o200k tokens.
Pin this tag's commit (796a35e4d893b985f1b61d8e11b5ae7e4118bf6f) in the catalog entry.