hermes-agent
Install command:
brew install hermes-agentSelf-improving AI agent that creates skills from experience
https://hermes-agent.nousresearch.com
License: MIT
Development: Pull requests
Formula JSON API: /api/formula/hermes-agent.json
Formula code: hermes-agent.rb on GitHub
Bottle (binary package) installation support provided for:
| macOS on Apple Silicon |
golden gate | ✅ |
|---|---|---|
| tahoe | ✅ | |
| sequoia | ✅ | |
| Linux | ARM64 | ✅ |
| x86_64 | ✅ |
Current versions:
| stable | ✅ | 0.22.4 |
| head | ⚡️ | HEAD |
Depends on:
| certifi | 2026.10.23 | Mozilla CA bundle for Python |
| cryptography | 50.0.2 | Cryptographic recipes and primitives for Python |
| libheif | 1.23.7 | ISO/IEC 23008-12:2017 HEIF file format decoder and encoder |
| node | 26.13.0 | Open-source, cross-platform JavaScript runtime environment |
| pillow | 13.0.0 | Friendly PIL fork (Python Imaging Library) |
| pydantic | 2.14.1 | Data validation using Python type hints |
| python@3.14 | 3.14.10 | Interpreted, interactive, object-oriented programming language |
| ripgrep | 15.2.0 | Search tool like grep and The Silver Searcher |
| rpds-py | 2026.9.1 | Python bindings to Rust's persistent data structures |
| tirith | 0.4.2 | Detect terminal injection, homograph, and pipe-to-shell attacks |
Depends on when building from source:
| pkgconf | 3.0.10 | Package compiler and linker metadata toolkit |
| rust | 1.99.1 | Safe, concurrent, practical language |
Binaries:
hermes,
hermes-acp,
hermes-agent
| Voice and TTS audio format conversion optionally uses ffmpeg: brew install ffmpeg |
Analytics:
| 30 days | 90 days | 365 days | |
|---|---|---|---|
| Installs | 3,327 | 8,605 | 15,859 |
Installs (--HEAD) | 20 | 70 | 207 |
| Installs on Request | 3,327 | 8,605 | 15,856 |
Installs on Request (--HEAD) | 14 | 64 | 201 |
Build Errors (--HEAD) | 4 | ||
| Build Errors | 1 |
Known vulnerabilities in the current version:
| PYSEC-2024-38 (high) | |
| GHSA-494j-54xm-rwp3 | AIOHTTP: Secure attribute not enforced for shared cookie |
| GHSA-5wr8-gcqf-gqf3 | aiohttp server lacks an initial request/header timeout |
| GHSA-6cjc-53gc-5rqm | AIOHTTP: Connector pool exhaustion via Max-Age overflow |
| GHSA-9xw5-w5jj-pvcg | AIOHTTP: File descriptor exhaustion in multipart requests |
| GHSA-f9xw-jh8m-3mwq | AIOHTTP: Absolute-form request targets can spoof Request.scheme |
| GHSA-gx76-c99x-2c96 | AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies |
| GHSA-pqxq-w44r-73xw | AIOHTTP: Pure-Python parser request smuggling |
| GHSA-3jp2-3mrg-2vxc (high) | OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device work... |
| GHSA-2g87-pp6c-29x5 | aiohttp: Multiple instances of excessive or unbounded memory/CPU use |
Data from Homebrew/advisory-database. Run brew vulns hermes-agent for a live check.