2026-07-01-hermes-agent-secrets-now-redacted-in-user-facing-command-guard-code-e

Secrets now redacted in user-facing command/guard/code-execution approval prompts (channel: main-unreleased, 2026-07-01). Operator consequence: P2 type/security fix. Credentials embedded in commands leaked verbatim into approval prompts shown on stdout and forwarded to Discord/Slack gateways (screenshottable/forwardable). redact_sensitive_text() now applied across prompt_dangerous_approval(), check_all_command_guards(), and check_execute_code_guard(). Redaction is display-only (raw command still executes; allowlist keys off pattern_key, unaffected). Teams running Hermes with messaging gateways in shared channels should re-audit exposure and upgrade (merge SHA 4a7a6fd). Full receipted detail lives in harvest/watchlist.md.

Receipt

https://github.com/NousResearch/hermes-agent/pull/55955

Finding metadata

Confidence: high

Run: 2026-07-01-weekly-digest-2026-06-24_2026-07-01-frontier-v0

Finding ID: 2026-07-01-hermes-agent-secrets-now-redacted-in-user-facing-command-guard-code-e

Accepted signals

Hermes landed a full security wave on main -- path-escape, command-approval-bypass, secret redaction -- and tagged none of it (still v2026.6.19) / 2026-07-01

Source links

Primary links, including exact changelog lines when available.

Hermes Agent
merged pr2026-07-01-hermes-agent-secrets-now-redacted-in-user-facing-command-guard-code-egithub.com/NousResearch/hermes-agent/pull/55955

Versioned source: run artifact