SecuritySaturday, October 3, 2026
Hermes Plugin Guard 0.2.1: TLS vs network hints
Maurice (KI-Vater) posted a before/after of Hermes Plugin Guard v0.2.1 on a synthetic plugin. Removing `verify=False` clears the TLS warning. Outbound-call hints stay on purpose: a network call needs review and is not auto-malicious. The scan does not import or run the target. He is explicit that a pass is not a safety guarantee, and asked for real rule-id examples of useful vs noisy warnings.
Why it matters
Distinct from ClawScan/AIG (covered yesterday). This is the local pre-install scanner operators run on their own Hermes plugins.