Maintainer of this skill?
Automated security scan — not a certification.
by EKKOLearnAI
Web dashboard for Hermes Agent — multi-platform AI chat, session management, scheduled jobs, usage analytics
# Add to your Claude Code skills
git clone https://github.com/EKKOLearnAI/hermes-web-uiGuides for using ai agents skills like hermes-web-ui.
Last scanned: 4/25/2026
{
"issues": [
{
"type": "npm-audit",
"message": "dompurify: DOMPurify is vulnerable to mutation-XSS via Re-Contextualization ",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "monaco-editor: Vulnerability found",
"severity": "medium"
}
],
"status": "PASSED",
"scannedAt": "2026-04-25T05:50:12.812Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}See how hermes-web-ui compares with popular alternatives.
hermes-web-ui is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by EKKOLearnAI. Web dashboard for Hermes Agent — multi-platform AI chat, session management, scheduled jobs, usage analytics. It has 7,877 GitHub stars.
Yes. hermes-web-ui passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/EKKOLearnAI/hermes-web-ui" and add it to your Claude Code skills directory (see the Installation section above).
hermes-web-ui is primarily written in TypeScript. It is open-source under EKKOLearnAI on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh hermes-web-ui against similar tools.
No comments yet. Be the first to share your thoughts!
Based on votes and bookmarks from developers who liked this skill
30 days in the Featured rail · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
| Area | What Hermes Studio does |
|---|---|
| Agent chat | Runs Hermes Agent conversations with streaming responses, tool traces, file upload/download, and persistent local sessions. |
| Local control plane | Manages profiles, providers, models, credentials, memory, skills, plugins, logs, and runtime settings from one dashboard. |
| Automation | Configures platform channels, cron jobs, Kanban tasks, group-chat rooms, and MCP servers around the same Hermes profiles. |
| Workspace tools | Provides a file browser, web terminal, voice input/output, coding-agent runners, device discovery, and performance views. |
| Distribution | Ships as a desktop app for Windows/macOS/Linux, an npm CLI package, and a Docker image. |
/chat-run; chat runs execute through the Hermes agent bridgeUnified configuration for 8 platforms in one page:
| Platform | Features |
|---|---|
| Telegram | Bot token, mention control, reactions, free-response chats |
| Discord | Bot token, mention, auto-thread, reactions, channel allow/ignore lists |
| Slack | Bot token, mention control, bot message handling |
| Enable/disable, mention control, mention patterns | |
| Matrix | Access token, homeserver, auto-thread, DM mention threads |
| Feishu (Lark) | App ID / Secret, mention control |
| QR code login (scan in browser, auto-save credentials) | |
| WeCom | Bot ID / Secret |
~/.hermes/.env~/.hermes/config.yaml~/.hermes/auth.json)/v1/models)/v4).tar.gz)hermes-studio MCP server and profile injectionAUTH_TOKEN env var)admin / 123456; users are prompted after login to change the default username and passwordCLI maintenance commands:
# Delete persisted login IP lock records
hermes-web-ui clear-login-locks
# Delete login locks and restart the running Web UI process
hermes-web-ui clear-login-locks --restart
# Create or reset the default super administrator login to admin / 123456
hermes-web-ui reset-default-login
clear-login-locks removes ${HERMES_WEB_UI_HOME:-~/.hermes-web-ui}/.login-lock.json. If the server is running, restart it to clear in-memory lock state. reset-default-login updates the Web UI account database; if an admin user already exists, its password is reset to 123456 and the account is enabled as a super administrator.
/audio/speech, custom OpenAI-compatible TTS endpoints, and MiMo..mp3/.wav, max 10 MB) with selectable auth header mode (Authorization, api-key, or both)./api/hermes/tts/synthesize endpoint, so stop/pause state is shared and in-flight fetches are aborted when possible.