Hermes Attestation Guardian - Setup Guide¶
Source: prompt-security/clawsec (94 installs) Category: Security / Verification License: Apache 2.0 · Platforms: Linux, macOS, Windows Dependencies: Hermes Agent (CLI/Gateway/profile-managed)
The Attestation Guardian verifies the integrity and authenticity of Hermes infrastructure components - CLI binaries, gateway deployments, and profile-managed environments. Performs release artifact verification, runtime attestation checks, and signed manifest validation.
⚠️ Important scope: This skill targets Hermes infrastructure only (CLI/Gateway/profile-managed deployments). Not an OpenClaw runtime hook package.
What It Does¶
| Capability | How |
|---|---|
| Release artifact verification | Validate signed release manifests before trusting SKILL.md, skill.json, or archives |
| Checksum validation | Verify checksums.json against the ClawSec release key |
| SBOM inspection | Review skill.json package metadata and software bill of materials |
| Runtime attestation | Verify running Hermes components match signed releases |
| Trust chain verification | Validate the signing key chain for all installed skills |
Installation¶
Via skills.sh (Recommended)¶
npx skills add prompt-security/clawsec --skill hermes-attestation-guardian -a hermes-agent -y
Vercel Skills CLI¶
npx skills add prompt-security/clawsec --skill hermes-attestation-guardian -a hermes-agent -y
How It Works¶
- Release pipeline signs
checksums.jsonwith the ClawSec release key - skill.json serves as the package metadata/SBOM source
- Attestation Guardian verifies the signature chain before trusting any artifact
- Runtime checks compare running components against verified release manifests
Verification Commands¶
# Verify an installed skill's attestation
hermes attestation verify <skill-name>
# Check all installed skills for attestation status
hermes attestation list
# Verify the Hermes binary itself
hermes attestation self-check
Prerequisites¶
| Requirement | Details |
|---|---|
| Hermes Agent | v0.20.0+ (CLI/Gateway/profile-managed) |
| ClawSec release key | Bundled with the skill |
| Internet access | For fetching release manifests |
Verification¶
After install, test attestation:
Hermes, verify the attestation of all installed skills
The agent should check each skill's signature, report pass/fail, and flag any unverified artifacts.
Pitfalls¶
- Hermes-only scope: Does NOT apply to OpenClaw deployments. The skill explicitly scopes to Hermes CLI/Gateway/profile-managed infrastructure.
- Offline operation: Cannot verify attestations without internet access to fetch release manifests.
- Not a runtime monitor: This is a point-in-time verification tool, not continuous monitoring. Run before trusting new artifacts.
- Snyk warning: The skill carries a SnykWarn security audit status. Review security findings before deploying in high-security environments.
Installed via: npx skills add prompt-security/clawsec --skill hermes-attestation-guardian -a hermes-agent -y
Integration with CorpusIQ¶
CorpusIQ is the connector layer that lets AI assistants read the systems a business already runs on - accounting, payments, CRM, email, files and analytics - and answer with the source named. It is read-only by design: it retrieves data and never writes to, or acts in, a connected system, which is what makes it safe to point at live accounts.
This page is part of the CorpusIQ directory, the reference we maintain for the MCP server and agent-skill ecosystem. Run alongside CorpusIQ, a third-party server like this one can be combined with a company's own business data in a single answer.