Snyk
Scan code (SAST), dependencies, container images, IaC and SBOMs with Snyk through its first-party MCP server (pinned snyk@1.1306.0 over npx stdio, CLI analytics disabled), with the snyk-security-scan workflow skill bundled. Portable Agent Plugins v1 package (mcp.json + skills/); needs Node.js/npm on PATH and a free Snyk account (browser login via the snyk_auth tool).
How to install
- Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install snyk - Said no? Turn it on later:
hermes plugins enable snyk - Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).
- Category
- Security & privacy
- Maintained by
- NousResearch (Official)
- Needs
- No API keys declared
- In the catalog
- 2026-09-12, updated 2026-10-10
- GitHub stars
- 515
Full setup & settings ↗Source code ↗
More in security & privacy
All security & privacy plugins
New Hermes Agent updates every day on X. Follow @HermesWatcher