Sato Check · Package
hermes-agent
pypi:hermes-agent · v0.19.0 · sha256:ac986bede64a · as of 2026-09-29
- Does it take your key? no evidence
- No private-key read found in what we read of its setup and published code — the limits say how much that was.
- No evidence line on file for this question yet.
- Does your key leave? no evidence
- Not yet run — we have not run this version with planted test keys.
- No evidence line on file for this question yet.
- Can it move funds on its own? no evidence
- Unknown — we could not read what it exposes.
- No evidence line on file for this question yet.
- What changed? no evidence
- First profile of this subject — nothing to compare yet.
- No evidence line on file for this question yet.
Is this your project? Respond →Dispute this reading
Hosts contacted
| Host | When | Role | Evidence |
|---|---|---|---|
| 192.168.1.10 | code | other | traced |
| 192.168.1.100 | code | other | traced |
| a.com | code | other | traced |
| accounts.google.com | code | other | traced |
| accounts.spotify.com | code | other | traced |
| ai.azure.com | code | other | traced |
| ai.google.dev | code | other | traced |
| aiplatform.googleapis.com | code | other | traced |
| airtable.com | code | other | traced |
| aistudio.google.com | code | other | traced |
| api-docs.deepseek.com | code | other | traced |
| api.anthropic.com | code | other | traced |
| api.arcee.ai | code | other | traced |
| api.deepinfra.com | code | other | traced |
| api.deepseek.com | code | other | traced |
| api.example.com | code | other | traced |
| api.fireworks.ai | code | other | traced |
| api.foo.com | code | other | traced |
| api.github.com | code | registry | traced |
| api.githubcopilot.com | code | other | traced |
| api.gmi-serving.com | code | other | traced |
| api.hindsight.vectorize.io | code | other | traced |
| api.kilo.ai | code | other | traced |
| api.kimi.com | code | other | traced |
| api.krea.ai | code | other | traced |
| api.minimax.io | code | other | traced |
| api.minimaxi.com | code | other | traced |
| api.moonshot.ai | code | other | traced |
| api.moonshot.cn | code | other | traced |
| api.novita.ai | code | other | traced |
| api.openai.com | code | other | traced |
| api.retaindb.com | code | other | traced |
| api.slack.com | code | other | traced |
| api.spotify.com | code | other | traced |
| api.stepfun.ai | code | other | traced |
| api.stepfun.com | code | other | traced |
| api.supermemory.ai | code | other | traced |
| api.upstage.ai | code | other | traced |
| api.vikingdb.cn-beijing.volces.com | code | other | traced |
| api.x.ai | code | other | traced |
| api.xiaomimimo.com | code | other | traced |
| api.z.ai | code | other | traced |
| app.byterover.dev | code | other | traced |
| app.fireworks.ai | code | other | traced |
| app.honcho.dev | code | other | traced |
| app.mem0.ai | code | other | traced |
| app.supermemory.ai | code | other | traced |
| app.tavily.com | code | other | traced |
| astral.sh | code | other | traced |
| auth.example.com | code | other | traced |
| auth.openai.com | code | other | traced |
| auth.x.ai | code | other | traced |
| aws.amazon.com | code | other | traced |
| bedrock-runtime.us-east-1.amazonaws.com | code | other | traced |
| bluebubbles.app | code | other | traced |
| brave.com | code | other | traced |
| brew.sh | code | other | traced |
| browser-use.com | code | other | traced |
| browserbase.com | code | other | traced |
| build.nvidia.com | code | other | traced |
Evidence (61 lines)
- tracedT-install-script2026-09-29
setup.py registers custom commands (cmdclass: "build": ReadOnlySourceBuild, "egg_info": ReadOnlySourceEggInfo,); pip runs them when building from source.
setup.py
- tracedT-hosts2026-09-29
192.168.1.10 appears in shipped code (other).
plugins/memory/hindsight/__init__.py
- tracedT-hosts2026-09-29
192.168.1.100 appears in shipped code (other).
hermes_cli/config.py
- tracedT-hosts2026-09-29
a.com appears in shipped code (other).
model_tools.py
- tracedT-hosts2026-09-29
accounts.google.com appears in shipped code (other).
plugins/google_meet/cli.py
- tracedT-hosts2026-09-29
accounts.spotify.com appears in shipped code (other).
hermes_cli/auth.py
- tracedT-hosts2026-09-29
ai.azure.com appears in shipped code (other).
plugins/model-providers/azure-foundry/__init__.py
- tracedT-hosts2026-09-29
ai.google.dev appears in shipped code (other).
agent/usage_pricing.py
- tracedT-hosts2026-09-29
aiplatform.googleapis.com appears in shipped code (other).
plugins/model-providers/vertex/__init__.py
- tracedT-hosts2026-09-29
airtable.com appears in shipped code (other).
hermes_cli/config.py
- tracedT-hosts2026-09-29
aistudio.google.com appears in shipped code (other).
agent/gemini_native_adapter.py
- tracedT-hosts2026-09-29
api-docs.deepseek.com appears in shipped code (other).
agent/usage_pricing.py
- tracedT-hosts2026-09-29
api.anthropic.com appears in shipped code (other).
plugins/model-providers/anthropic/__init__.py
- tracedT-hosts2026-09-29
api.arcee.ai appears in shipped code (other).
plugins/model-providers/arcee/__init__.py
- tracedT-hosts2026-09-29
api.deepinfra.com appears in shipped code (other).
plugins/image_gen/deepinfra/__init__.py
- tracedT-hosts2026-09-29
api.deepseek.com appears in shipped code (other).
plugins/model-providers/deepseek/__init__.py
- tracedT-hosts2026-09-29
api.example.com appears in shipped code (other).
hermes_cli/config.py
- tracedT-hosts2026-09-29
api.fireworks.ai appears in shipped code (other).
plugins/model-providers/fireworks/__init__.py
- tracedT-hosts2026-09-29
api.foo.com appears in shipped code (other).
agent/video_gen_provider.py
- tracedT-hosts2026-09-29
api.github.com appears in shipped code (registry).
hermes_cli/copilot_auth.py
- tracedT-hosts2026-09-29
api.githubcopilot.com appears in shipped code (other).
plugins/model-providers/copilot/__init__.py
- tracedT-hosts2026-09-29
api.gmi-serving.com appears in shipped code (other).
plugins/model-providers/gmi/__init__.py
- tracedT-hosts2026-09-29
api.hindsight.vectorize.io appears in shipped code (other).
plugins/memory/hindsight/__init__.py
- tracedT-hosts2026-09-29
api.kilo.ai appears in shipped code (other).
plugins/model-providers/kilocode/__init__.py
- tracedT-hosts2026-09-29
api.kimi.com appears in shipped code (other).
agent/anthropic_adapter.py
- tracedT-hosts2026-09-29
api.krea.ai appears in shipped code (other).
plugins/image_gen/krea/__init__.py
- tracedT-hosts2026-09-29
api.minimax.io appears in shipped code (other).
plugins/model-providers/minimax/__init__.py
- tracedT-hosts2026-09-29
api.minimaxi.com appears in shipped code (other).
plugins/model-providers/minimax/__init__.py
- tracedT-hosts2026-09-29
api.moonshot.ai appears in shipped code (other).
plugins/model-providers/kimi-coding/__init__.py
- tracedT-hosts2026-09-29
api.moonshot.cn appears in shipped code (other).
plugins/model-providers/kimi-coding/__init__.py
- tracedT-hosts2026-09-29
api.novita.ai appears in shipped code (other).
plugins/model-providers/novita/__init__.py
- tracedT-hosts2026-09-29
api.openai.com appears in shipped code (other).
agent/auxiliary_client.py
- tracedT-hosts2026-09-29
api.retaindb.com appears in shipped code (other).
plugins/memory/retaindb/__init__.py
- tracedT-hosts2026-09-29
api.slack.com appears in shipped code (other).
hermes_cli/config.py
- tracedT-hosts2026-09-29
api.spotify.com appears in shipped code (other).
hermes_cli/auth.py
- tracedT-hosts2026-09-29
api.stepfun.ai appears in shipped code (other).
plugins/model-providers/stepfun/__init__.py
- tracedT-hosts2026-09-29
api.stepfun.com appears in shipped code (other).
hermes_cli/auth.py
- tracedT-hosts2026-09-29
api.supermemory.ai appears in shipped code (other).
plugins/memory/supermemory/__init__.py
- tracedT-hosts2026-09-29
api.upstage.ai appears in shipped code (other).
plugins/model-providers/upstage/__init__.py
- tracedT-hosts2026-09-29
api.vikingdb.cn-beijing.volces.com appears in shipped code (other).
plugins/memory/openviking/__init__.py
- tracedT-hosts2026-09-29
api.x.ai appears in shipped code (other).
plugins/image_gen/xai/__init__.py
- tracedT-hosts2026-09-29
api.xiaomimimo.com appears in shipped code (other).
plugins/model-providers/xiaomi/__init__.py
- tracedT-hosts2026-09-29
api.z.ai appears in shipped code (other).
plugins/model-providers/zai/__init__.py
- tracedT-hosts2026-09-29
app.byterover.dev appears in shipped code (other).
plugins/memory/byterover/__init__.py
- tracedT-hosts2026-09-29
app.fireworks.ai appears in shipped code (other).
plugins/model-providers/fireworks/__init__.py
- tracedT-hosts2026-09-29
app.honcho.dev appears in shipped code (other).
plugins/memory/honcho/__init__.py
- tracedT-hosts2026-09-29
app.mem0.ai appears in shipped code (other).
plugins/memory/mem0/__init__.py
- tracedT-hosts2026-09-29
app.supermemory.ai appears in shipped code (other).
plugins/memory/supermemory/__init__.py
- tracedT-hosts2026-09-29
app.tavily.com appears in shipped code (other).
hermes_cli/config.py
- tracedT-hosts2026-09-29
astral.sh appears in shipped code (other).
plugins/memory/hindsight/__init__.py
- tracedT-hosts2026-09-29
auth.example.com appears in shipped code (other).
plugins/dashboard_auth/self_hosted/__init__.py
- tracedT-hosts2026-09-29
auth.openai.com appears in shipped code (other).
hermes_cli/auth.py
- tracedT-hosts2026-09-29
auth.x.ai appears in shipped code (other).
hermes_cli/auth.py
- tracedT-hosts2026-09-29
aws.amazon.com appears in shipped code (other).
agent/usage_pricing.py
- tracedT-hosts2026-09-29
bedrock-runtime.us-east-1.amazonaws.com appears in shipped code (other).
plugins/model-providers/bedrock/__init__.py
- tracedT-hosts2026-09-29
bluebubbles.app appears in shipped code (other).
hermes_cli/config.py
- tracedT-hosts2026-09-29
brave.com appears in shipped code (other).
agent/web_search_provider.py
- tracedT-hosts2026-09-29
brew.sh appears in shipped code (other).
plugins/google_meet/cli.py
- tracedT-hosts2026-09-29
browser-use.com appears in shipped code (other).
hermes_cli/config.py
- tracedT-hosts2026-09-29
browserbase.com appears in shipped code (other).
agent/browser_provider.py
- tracedT-hosts2026-09-29
build.nvidia.com appears in shipped code (other).
plugins/model-providers/nvidia/__init__.py
Limits
- The observed lane has not run on this version: not yet run on this version
- Traced analysis follows flows inside one module only; a key handed from one module to another is not followed.
- The observed lane has not run on this version.
- No tool inventory was available, so fund actions were not read.
- Traced: Python read line by line, not parsed; 897 code files; read 400, entry points first; 161 literal hosts; listed the first 60.
A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".
sato.custody/v1 · custody-1
Maintain this project? Respond to this reading
Loading sign-in…