Hermes Agent merges 365 PRs, tightens security

Hermes Agent is addressing critical runtime hygiene gaps by replacing brittle CLI execution habits with battle-tested privilege isolation. When autonomous agents run shell commands and juggle multiple model providers, unisolated credential piping is a severe exploit vector.

• –Sudo askpass integration across local, Docker, SSH, and cloud SDK sandboxes stops passwords from leaking into command stdin or tool outputs.
• –Origin-binding prevents stored custom-endpoint API keys and context from silently following altered URLs to new hosts.
• –Storing credentials exclusively in .env with ${VAR} references in config.yaml eliminates plaintext leaks during configuration sharing and session exports.
• –Gateway-level stream redaction and authenticated attachment fetching prevent token and data leakage across Discord, Telegram, and Slack bridges.