hermes-agent-skill-authoring skill
Author in-repo SKILL.md files: frontmatter and structure.
Is the hermes-agent-skill-authoring skill safe?
Clean: nothing in its files matched our rules. We read 1 file in the folder on 2026-11-01.
No findings.
Install the hermes-agent-skill-authoring skill
A skill is a folder. Copy it into your agent's skills folder and the agent loads it when the task matches its description.
git clone --depth 1 https://github.com/NousResearch/hermes-agent.git /tmp/hermes-agent mkdir -p ~/.claude/skills cp -r /tmp/hermes-agent/optional-skills/software-development/hermes-agent-skill-authoring ~/.claude/skills/hermes-agent-skill-authoring
In the Claude apps, zip the folder and upload it from the Skills settings. The folder on GitHub
The instructions your agent would load
SKILL.md as published, without the frontmatter. Read it on GitHub
Authoring Hermes-Agent Skills (in-repo)
Overview
There are two places a SKILL.md can live:
- User-local: ~/.hermes/skills///SKILL.md — personal, not shared. Created via skill_manage(action='create').
- In-repo (this skill is about this case): skills///SKILL.md or optional-skills///SKILL.md inside the hermes-agent repo — committed, shipped with the package. Use writefile + git add. skillmanage(action='create') does NOT target this tree.
In-repo skills must meet the repo's hardline authoring standards (see AGENTS.md, "Skill authoring standards (HARDLINE)" — that section is the source of truth; this skill is the operational walkthrough). Reviewers reject PRs that violate them, so meeting them up front is cheaper than a salvage pass later.
When to Use
- User asks you to add a skill "in this branch / repo / commit"
- You're committing a reusable workflow that should ship with hermes-agent
- You're editing an existing skill under skills/ or optional-skills/ (use patch for small edits, writefile for rewrites; skillmanage still works for patch on in-repo skills, but not for create)
- Don't use for: personal skills in ~/.hermes/skills/ (just use skill_manage)
Decide the Tier First: Bundled vs Optional
- Bundled (skills//) — daily-driver behavior, broadly useful across many user types, low footprint. Hard bar: you can say "a user will load this in 5+ sessions per month" with a straight face.
- Optional (optional-skills//) — niche, vertical-specific (blockchain, gaming, finance, one app), recurring-job/task skills, or anything heavy. Installed via hermes skills install official//.
When in doubt, optional. Promoting later is easy; demoting is churn. "Would be useful to anyone who ever needs this" is an optional-tier argument, not a bundled one.
Pick the category by what the tool IS, not what it feels like (an AI-agent CLI goes in autonomous-ai-agents/ even if it "feels productivity"). Confirm existing categories with searchfiles(pattern='', target='files', path='skills') and don't invent new top-level categories casually.
No router / index / hub skills. A skill whose core content is a routing table pointing at sibling skills adds an indirection hop and duplicates the siblings' own When to Use triggers. If the skill would be empty without "load skill X instead" pointers, don't write it — the catalog and each sibling's triggers already do that job.
Required Frontmatter
Validator source of truth: tools/skillmanagertool.py::validatefrontmatter. Validator hard requirements:
- Starts with --- as the first bytes (no leading blank line).
- Closes with \n---\n before the body.
- Parses as a YAML mapping.
- name field present.
- description field present (validator ceiling 1024 chars — but see the repo hardline below, which is much stricter).
- Non-empty body after the closing ---.
Repo-standard shape (all fields expected, even where the validator doesn't enforce them):
---
name: my-skill-name # lowercase, hyphens, ≤64 chars (MAX_NAME_LENGTH)
description: Concise capability statement, under sixty chars.
version: 0.1.0 # semver; new skills start at 0.1.0
author: Real Name (github-handle), Hermes Agent
license: MIT
platforms: [linux, macos, windows] # audit, don't guess — see Platform Gating
metadata:
hermes:
tags: [Short, Descriptive, Tags]
related_skills: [other-in-repo-skill]
---description rules (HARDLINE — the validator's 1024 is NOT the standard)
- ≤ 60 characters. One sentence. Ends with a period.
- State the capability, not the implementation, and don't repeat the skill name or its category name (the index prints the category above the skill).
- No marketing words ("powerful", "comprehensive", "seamless", "advanced").
- 60 is the width the system prompt skill index shows; skill_manage rejects a new or changed description over it, and the index clips a longer legacy one at a word boundary.
- If the description contains a :, wrap it in double quotes or YAML parses it as a mapping and the docs generator crashes. Quotes don't count toward the 60.
Good: Track named companies for material news with cited digests. Bad: Use when a user asks to monitor named competitors or companies for product launches, pricing changes, funding, ... (240 chars — rejected in review)
author rules
- Credit the human first, then "Hermes Agent" as secondary collaborator: Ben Barclay (benbarclay), Hermes Agent.
- Never author: Hermes Agent alone for contributed skills — credit the human, not the tool, even (especially) when an agent drafted the text.
- Maintainer-authored skills: Teknium (teknium1), Hermes Agent.
related_skills rules
- Every entry must resolve to an existing in-repo skill in the same tree state as your PR. Do not reference skills that were only planned, live in another PR, or exist only in ~/.hermes/skills/.
- Verify each entry: search_files(pattern='', target='files', path='skills') (and optional-skills/).
Platform Gating: audit, don't trust
platforms: gates loading by host OS. Set it from what the skill's prose and scripts actually invoke:
<!-- no-tmp: ok — names the anti-pattern skill authors must avoid --> POSIX-only signals to search for in scripts/: fcntl, termios, pty, os.fork, os.killpg, signal.SIGKILL, os.kill(pid, 0) liveness checks, hardcoded /tmp /proc /etc. Default posture: fix cross-platform first (tempfile.gettempdir(), pathlib.Path, psutil.pid_exists); gate narrower only when the dependency is genuinely platform-bound, and say why in ## Pitfalls.
Size Limits
- Full SKILL.md: ≤ 100,000 chars enforced (MAXSKILLCONTENTCHARS), but target ~100 lines for a simple skill, ~200 for a complex one**. Peer skills sit at 8-14k chars.
- Bulky or branch-specific material goes in references/*.md, templates/, or scripts/ — pointed to from SKILL.md, not inlined.
- Don't expect the model to inline-write parsers or non-trivial logic every call — ship a helper script in scripts/ and reference it by path.
Body Structure (modern section order)
# <Skill> Skill
2-3 sentence intro: what it does, what it doesn't do, dependency stance.
## When to Use — bulleted triggers (+ "Don't use for:" counter-triggers)
## Prerequisites — exact env vars, installs, API key sourcing
## How to Run — canonical invocation through the `terminal` tool
## Quick Reference — flat command list, no narration
## Procedure — numbered steps, each with a checkable completion criterion
## Pitfalls — known limits, things that look broken but aren't
## Verification — how to prove the skill workedNot every section applies to every skill (a pure-procedure task skill may have no Quick Reference), but When to Use + actionable body + Pitfalls + Verification are the minimum. Cut marketing intros, "Setup Check" no-ops, and re-explanations of env vars already in Prerequisites.
Reference Hermes tools, not raw shell
When the skill needs a capability, name the proper Hermes tool in backticks: terminal, readfile, writefile, patch, searchfiles, websearch, webextract, browserexec, visionanalyze, delegatetask, cronjob. Do NOT name shell utilities the agent already has wrapped (grep → searchfiles, cat → readfile, sed/awk → patch, find/ls → search_files target='files'). A CLI-wrapper skill should frame invocations as terminal(command="{tool} ...", timeout=...) — bare shell prose ("run foo --version") is a review-blocking non-conformance. If the skill depends on an MCP server, name it and document setup in Prerequisites.
Never use machine-local paths
Write repo-relative paths (skills/..., tools/skillmanagertool.py). A /home//... path baked into a committed skill breaks for every other user and is an instant review flag.
Writing Quality Principles
A skill exists to make the agent's process more predictable — the agent reliably follows the same useful discipline.
- Optimize for process predictability. If a line does not change behavior, cut it.
- Choose the right context load. The description is paid for every turn; details go in the body or linked references.
- End steps with completion criteria. Checkable and, when it matters, exhaustive: "every modified file accounted for" beats "summarize changes."
- Co-locate rules with the concept they govern.
- Use strong leading words ("tight loop," "root cause," "regression test") over long repeated explanations.
- Prune duplication and no-ops. "Be careful" and "use best practices" don't change model behavior — replace with a checkable criterion or delete.
Tests and Docs (required for repo skills)
- Tests live at tests/skills/testskill.py — stdlib + pytest + unittest.mock only, no live network. Run via scripts/runtests.sh tests/skills/testskill.py -q. (The generic tests/tools/testskillmanagertool.py passing proves nothing about YOUR skill.)
- Docs regen: run python website/scripts/generate-skill-docs.py, then apply scope discipline — the generator rewrites EVERY auto-gen page. git checkout -- everything that isn't yours; the final diff must show only your SKILL.md, your one per-skill docs page, a one-line catalog row, and a one-line website/sidebars.ts insertion (verify with search_files(pattern='', path='website/sidebars.ts') — exactly one hit, or the page is an orphan).
- .env.example (only if the skill needs new env vars): one clearly delimited commented block; touch nothing else in the file.
Workflow
- Survey peers in the target category with search_files(target='files') and read 2-3 peer SKILL.md files to match tone and structure. Prefer extending an existing skill over creating a narrow sibling.
- Decide tier and category (see above). When in doubt, optional — and ask before pushing rather than defaulting.
- Draft with write_file to skills///SKILL.md (or optional-skills/...).
- Validate locally:
import re, pathlib
from ruamel.yaml import YAML
content = pathlib.Path("skills/<category>/<name>/SKILL.md").read_text()
assert content.startswith("---")
m = re.search(r'\n---\s*\n', content[3:])
fm = YAML(typ="safe").load(content[3:m.start()+3])
assert "name" in fm and "description" in fm
assert len(fm["description"]) <= 60, f"description {len(fm['description'])} chars — hardline is 60"
assert fm["description"].endswith(".")
assert "platforms" in fm
assert len(content) <= 100_000Also verify every related_skills entry exists in-repo.
- Add tests + regen docs (previous section).
- Git add + commit on the active branch; open a PR.
- Note: the CURRENT session's skill loader is cached — skillview / skillslist will not see the new skill until a new session. This is expected, not a bug.
Editing Existing In-Repo Skills
- Small fix: skill_manage(action='patch', ...) works on in-repo skills, as does patch.
- Major rewrite: write_file the whole SKILL.md.
- Supporting files: write_file to references/, templates/, or scripts/ under the skill dir.
- Always commit — in-repo skills are source, not runtime state. Re-run the docs generator when frontmatter changed.
Common Pitfalls
- Using skillmanage(action='create') for an in-repo skill. It writes to ~/.hermes/skills/, not the repo tree. Use writefile.
- Trusting the validator's limits as the standard. The validator allows 1024-char descriptions; review rejects anything over 60. The validator doesn't check platforms:, author format, tests, or docs — review does.
- author: Hermes Agent on a contributed skill. Credit the human first.
- Leading whitespace before ---. Validation fails on any leading blank line or BOM.
- Description too generic or trigger buried past char 57.
- relatedskills pointing at skills that don't exist in-repo** (user-local, planned, or in a sibling PR).
- Duplicating a peer. Survey the category first; extend rather than sibling.
- Skipping the docs generator or pushing its unrelated drift. Both directions are wrong: no regen = orphan skill with no docs page; blind regen = a ballooned diff full of other skills' drift.
- Expecting the current session to see the new skill. The loader is initialized at session start.
- Letting skills accumulate sediment. When adding a rule, remove the old wording it replaces.
Verification Checklist
- [ ] Tier decided deliberately (bundled bar: 5+ sessions/month; else optional-skills/)
- [ ] File at skills///SKILL.md or optional-skills///SKILL.md
- [ ] Frontmatter starts at byte 0 with ---, closes with \n---\n
- [ ] name, description, version, author, license, platforms, metadata.hermes.{tags, related_skills} all present
- [ ] Description ≤ 60 chars, one sentence, ends with a period, no marketing words
- [ ] author credits the human contributor first
- [ ] platforms: audited against actual prose/scripts, not copied from a sibling
- [ ] Every related_skills entry resolves in-repo
- [ ] Body follows the modern section order; commands framed through Hermes tools
- [ ] No machine-local paths anywhere in the file
- [ ] Each ordered step has a checkable completion criterion
- [ ] Tests at tests/skills/testskill.py pass under scripts/runtests.sh
More skills from NousResearch/hermes-agent
- A1passwordSet up op CLI, sign in, and read or inject secrets.
- A3-statement-modelBuild integrated IS/BS/CF financial workbooks in Excel.
- AaccelerateRun PyTorch training across GPUs with minimal changes.
- Cactual-setupSet up Actual Computer (actual.inc) inference in Hermes.
- Aadversarial-ux-testRoleplay a hostile user to find and triage UX pain points.
- Aagent-merge-conflict-arbiterNeutral arbiter for merge conflicts between two agents.
- AagentmailUse when an agent needs AgentMail CLI email inboxes.
- Aai-presenter-videoMake a verified AI presenter video from script + image.
- AairtableAirtable REST API via curl. Records CRUD, filters, upserts.
- AanatomyExplain an idea as an interactive isometric machine figure.
- Cantigravity-cliOperate the Antigravity CLI (agy): plugins, auth, sandbox.
- Aapple-notesManage Apple Notes via memo CLI: create, search, edit.