# Snyk: Hermes Agent plugin

> Scan code (SAST), dependencies, container images, IaC and SBOMs with Snyk through its first-party MCP server (pinned snyk@1.1306.0 over npx stdio, CLI analytics disabled), with the snyk-security-scan workflow skill…

Canonical: https://hermeswatcher.com/plugins/snyk  
Tier: Official  
Official page (Nous Research): https://hermes-agent.nousresearch.com/docs/plugins/snyk  
Last updated in catalog: 2026-10-10

Scan code (SAST), dependencies, container images, IaC and SBOMs with Snyk through its first-party MCP server (pinned snyk@1.1306.0 over npx stdio, CLI analytics disabled), with the snyk-security-scan workflow skill bundled. Portable Agent Plugins v1 package (mcp.json + skills/); needs Node.js/npm on PATH and a free Snyk account (browser login via the snyk_auth tool).

## How to install

1. Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.

```bash
hermes plugins install snyk
```

2. Said no? Turn it on later:

```bash
hermes plugins enable snyk
```

3. Restart Hermes so it loads the plugin.

Some plugins also need a sign-in or settings: see the official page. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide: https://hermes-agent.nousresearch.com/docs/user-guide/features/plugins

## Facts

- Category: Security & privacy
- Maintained by: NousResearch (Official)
- Needs: No API keys declared
- In the catalog since: 2026-09-12, updated 2026-10-10

## Links

- [Full setup and settings (official page)](https://hermes-agent.nousresearch.com/docs/plugins/snyk)
- [Source code](https://github.com/NousResearch/hermes-official-plugins/tree/main/snyk)
- [All plugins](https://hermeswatcher.com/plugins.md)

---

HermesWatcher is an independent guide. It is not affiliated with or endorsed by Nous Research. The [official Hermes Agent documentation](https://hermes-agent.nousresearch.com/docs) and [repository](https://github.com/NousResearch/hermes-agent) from Nous Research are the authority; each page here lists the official sources it was written from. If this site and the official docs disagree, trust the official docs. Index for agents: https://hermeswatcher.com/llms.txt