by sir1st
Moved to EKKOLearnAI/hermes-web-ui; this repo is kept for historical releases.
# Add to your Claude Code skills
git clone https://github.com/sir1st/hermes-desktopGuides for using ai agents skills like hermes-desktop.
Last scanned: 6/22/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@electron/rebuild: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "app-builder-lib: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "cacache: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dmg-builder: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron-builder: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron-builder-squirrel-windows: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "form-data: form-data: CRLF injection in form-data via unescaped multipart field names and filenames",
"severity": "high"
},
{
"type": "npm-audit",
"message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "make-fetch-happen: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "node-gyp: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "undici: undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-06-22T09:51:57.766Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}hermes-desktop is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by sir1st. Moved to EKKOLearnAI/hermes-web-ui; this repo is kept for historical releases. It has 66 GitHub stars.
hermes-desktop returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/sir1st/hermes-desktop" and add it to your Claude Code skills directory (see the Installation section above).
hermes-desktop is primarily written in JavaScript. It is open-source under sir1st on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh hermes-desktop against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
English · 中文
All-in-one cross-platform desktop app for Hermes Agent.
Bundles a Python runtime + hermes-agent + hermes-web-ui
into a single download — users don't need to install Python or Node.

This project would not exist without two upstream projects, and the maintainers behind them. Hermes Desktop is a packaging shell — almost all of the user-visible surface comes from these two:
If you find Hermes Desktop useful, please go give those repositories a star — they're doing the hard work.
Electron Main (Node)
├─ Spawns vendored hermes-web-ui Koa server (ELECTRON_RUN_AS_NODE) on 127.0.0.1:8648
│ └─ HERMES_BIN → bundled python's hermes CLI (gateway)
└─ BrowserWindow loads http://127.0.0.1:8648 with auth token injected via preload
vendor/hermes-web-uipython-build-standalone extracted under resources/python/<os>-<arch>/hermes-agent is pip installed into that bundled Python at build timeGrab the latest installer for your platform from GitHub Releases:
| Platform | File |
|---|---|
| macOS Apple Silicon | Hermes-Desktop-<v>-arm64.dmg |
| macOS Intel | Hermes-Desktop-<v>-x64.dmg |
| Windows x64 | Hermes-Desktop-<v>-x64.exe |
| Linux x64 | Hermes-Desktop-<v>-x86_64.AppImage / .deb |
| Linux arm64 | Hermes-Desktop-<v>-arm64.AppImage |
The app is not code-signed yet in v0.x. First-run hints:
Applications, run once:
xattr -cr "/Applications/Hermes Desktop.app"
Otherwise Gatekeeper says "已损坏" because the download has the
com.apple.quarantine attribute and the binary is unsigned.git clone --recurse-submodules https://github.com/sir1st/hermes-desktop
cd hermes-desktop
npm install
# One-time per machine: build vendored web-ui
cd vendor/hermes-web-ui && npm ci && npm run build && cd ../..
# One-time per (os, arch): fetch Python + install hermes-agent + apply patches
npm run prepare:python # uses uv if available, else pip
npm run dev # launches Electron with the dev build
uv is strongly recommended for prepare:python — pip on some networks/mirrors
silently hangs while uv resolves the full hermes-agent dep tree in seconds.
npm run dist:mac # → release/Hermes Desktop-<version>-arm64.dmg + x64.dmg
npm run dist:win # → release/...-x64.exe (NSIS)
npm run dist:linux # → release/...-x64.AppImage + .deb
CI in .github/workflows/release.yml builds the matrix on vX.Y.Z tags
and uploads to GitHub Releases. Each matrix job builds with --publish never
and uploads workflow artifacts; a final publish job downloads them and
creates one Release via gh release create (avoids electron-builder's
parallel-draft race). electron-updater auto-detects updates on next launch.
hermes-desktop/
├── src/main/ # Electron main process
├── src/preload/ # Renderer preload (token + auto-login)
├── vendor/hermes-web-ui/ # submodule, locked version
├── resources/python/ # CI / dev artifact, gitignored
├── patches/ # README of curated upstream patches
├── scripts/
│ ├── fetch-python.mjs # download python-build-standalone
│ ├── install-hermes.mjs # uv pip install hermes-agent + relocatable launcher
│ ├── prune-python.mjs # strip __pycache__/tests/idle/tkinter
│ ├── apply-hermes-patches.mjs # local fixes to bundled hermes-agent
│ └── apply-webui-patches.mjs # local fixes to bundled hermes-web-ui
└── electron-builder.yml
python-build-standalone: 202605103.12.13hermes-agent: 0.14.0hermes-web-ui: tracked at the submodule's HEADBump in scripts/fetch-python.mjs, scripts/install-hermes.mjs, and the submodule.
Hermes Desktop itself is MIT. Bundled artifacts retain their upstream licenses:
hermes-agent — MIT (Nous Research)hermes-web-ui — BSL-1.1 (EKKO Learn AI)python-build-standalone — Python Software Foundation License + othersSee each project's repository for full terms.