Saturday, November 7, 2026 270 picks · 133 builders credited Subscribe
AgentRags.

The agentic rag, wrung out.

The rag for

Friday, October 2, 2026

The day in one breath

OpenClaw put Tencent’s AI-Infra-Guard into ClawScan, so every skill and plugin uploaded to ClawHub now passes a second scanner and an AI judge alongside NVIDIA SkillSpector. Official post, same-day blog, and hard numbers: 86.9% label match and 98.6% malicious classification on a 556-case SkillTrustBench subset. It stands out because it changes the supply chain both ecosystems are arguing about, not just a feature checkbox. The community’s loudest Hermes item is the `0bull` iPhone plugin (402 likes, 525 bookmarks), which is the runner-up if the column wants the engagement spike instead of the security change.

Security

Tencent AIG joins ClawScan

OpenClaw wired Tencent Hunyuan’s AI-Infra-Guard into ClawScan, the CLI that reviews every skill and plugin uploaded to ClawHub. ClawScan now runs AIG and NVIDIA SkillSpector independently, then an AI judge reads both reports plus the uploaded files. AIG covers nine risk classes, including instruction hijacking, memory poisoning, remote payload execution, unauthorized access, persistence, and insecure dependencies. On a 556-case SkillTrustBench subset, the combined system matched 86.9% of labels and correctly classified 98.6% of malicious cases. Disagreements and confirmed false positives go back to Tencent as regression cases.

Credit@openclaw

Tools & Plugins

Hermes 0bull plugin drives a physical iPhone

Tony Simons flagged the new catalog plugin `0bull`. Hermes can see the screen, read on-screen text, tap, type, run device commands, and execute macros on a real iPhone, not a simulator. He also says it can publish through the TikTok and YouTube Shorts apps on the device. Install path given: `hermes plugins install 0bull`.

Credit@tonysimons_

Guides & Workflows

Have Hermes review an Omarchy plugin before it touches the box

BkashJosi posted a review prompt for Omarchy plugins: check the machine’s Omarchy version and dependencies, explain what the plugin adds, show install steps, include verification and removal, and wait for approval. Suggested starters: GitHub notifications, a calendar, Radio Atlas. Requires Hermes on the Omarchy machine so it can read the real setup.

Credit@BkashJosi

Industry

Aria pins Hermes 0.21.5 and OpenClaw 2026.9.7, opt-in only

Aria Workspaces moved container Hermes to runtime 0.21.5 with plugin compatibility fixes, and OpenClaw to 2026.9.7 with gateway updates and config migration. Both upgrades are opt-in, take a state backup, and roll back on failure. Native Hermes stays on the official desktop-compatible release; 0.21.5 applies to container installs. Omarchy install flow moved to 4.0.4 with a whole-machine backup before native upgrades.

Credit@Entelic_Aria

Releases

182 Hermes PRs: free Fast Search, 900k Codex, catalog lockdown

Luke’s Oct 2 digest lists 182 merged PRs. Hermes Release Watch pulled the three that change daily use: Codex OAuth can select `gpt-6.1-sol-900k` for a larger window; registered Nous accounts get managed Perplexity Fast Search without paid credits (guests stay on the keyless ring); kanban workers can reschedule their own cards with `kanban_schedule`. Security items in the same batch: the plugin catalog refuses plugins that override Hermes core or Desktop at runtime; X and Instagram embeds no longer run vendor scripts in the Desktop window; automatic git worktrees no longer run a cloned repo’s filters or hooks; at-rest secrets hardened in browser profiles, media caches, and the in-flight journal.

Credit@HermesWatcher, @iamlukethedev

Tools & Plugins

One Hermes install, several Google accounts

Nous Research confirmed multi-account Google handling: one install can authenticate several Google accounts, tokens stored per email, selection via `--account`, an environment variable, or a default-account setting. Multi-calendar access inside an account is supported (search, read, send, create events) after a Google Cloud project and OAuth credentials.

Credit@NousResearch

Never miss a night

Every pick, delivered to your reader.

One feed for everything, or one per agent harness you run. Rebuilt every night, with full credit on every item.