{
 "sources": [
  {
   "url": "https://raw.githubusercontent.com/aydnOktay/hermes-done-bell-/3fa519a291d91b0e6c44bd42762190363ce80c39/README.md",
   "quote": "No API keys. Does not send chat, write code, or touch user files."
  },
  {
   "url": "https://raw.githubusercontent.com/NousResearch/hermes-official-plugins/e7a218f26db88426ab3e7376f0e000b6e356f5e7/homeassistant/README.md",
   "quote": "blocklist is the only guard"
  },
  {
   "url": "https://raw.githubusercontent.com/NousResearch/hermes-official-plugins/e7a218f26db88426ab3e7376f0e000b6e356f5e7/homeassistant/tools.py",
   "quote": "return hass_url, (get_secret(\"HASS_TOKEN\", \"\") or \"\").strip()"
  },
  {
   "url": "https://raw.githubusercontent.com/Schultzenator/hermes-plugin-openbao/523f4584bbeece67b39ff66aa84bcadf59c3f087/README.md",
   "quote": "The plugin never reads `.env`, `auth.json`,"
  },
  {
   "url": "https://raw.githubusercontent.com/AbdullahBalfaqih/hermes-followthrough/a31ec76c21335bf7ecb4481717df1418e4266910/followthrough/schemas.py",
   "quote": "Ask the user to clarify ambiguous dates or ownership before calling this tool."
  },
  {
   "url": "https://raw.githubusercontent.com/1anter/hermes-research-plugins/48befeaf71f0bfed7916553d1a511c81a37a9c4b/plugins/component-workbench/README.md",
   "quote": "No credential stores are read. Do not put secrets in captured passages or artifact text."
  },
  {
   "url": "https://raw.githubusercontent.com/willbohn/hermes-egm/d37006f9ddd940ed196fa07554fe2dd470ce7336/SECURITY.md",
   "quote": "details or secrets publicly. Never attach auth files or real sensitive review inputs."
  },
  {
   "url": "https://raw.githubusercontent.com/codeybot-labs/signaldesk/1fb9efc3d6895f5852d5f04b9a6e09477e1f559e/toolhandlers.py",
   "quote": "Local .eml written. Open it in your mail client or copy the body. SignalDesk did not send anything."
  },
  {
   "url": "https://raw.githubusercontent.com/codeybot-labs/signaldesk/1fb9efc3d6895f5852d5f04b9a6e09477e1f559e/hooks.py",
   "quote": "Fail-closed send guard. Unattended cron can never send outreach."
  },
  {
   "url": "https://raw.githubusercontent.com/fortograph/fortograph-hermes-plugin/eadfb4c143c9729f47551138d2b9d38dbd40d515/plugin-catalog-entry.yaml",
   "quote": "secret), and disclose that it uploads images to the remote Fortograph"
  },
  {
   "url": "https://raw.githubusercontent.com/Tokagehausu/hermes-fusen/77dc01b95ea4551d2004860736f1a58836d21b83/README.md",
   "quote": "**Network:** none. No telemetry, no remote calls, no API keys."
  },
  {
   "url": "https://raw.githubusercontent.com/kahnanX/bumblebee-guard/8cdf7e03493eedbd8fd7abb5a2aed53b230e53c6/core.py",
   "quote": "\"PATH\": os.environ.get(\"PATH\") or \"/usr/local/bin:/usr/bin:/bin\","
  },
  {
   "url": "https://raw.githubusercontent.com/kvnloo/glide/82be62de43709d87991e71d458e001691cd0f0a2/pull_requests.py",
   "quote": "Nothing here calls GitHub: a link is the URL's host, repository and number. The frontend reads the"
  },
  {
   "url": "https://raw.githubusercontent.com/Icarus-B4/hermes-official-plugins/44bf943f2770a1336753f4a84d36a97a16c4b49c/grammarly/desktop/plugin.js",
   "quote": "apply: 'Apply'"
  }
 ]
}