Nous Research's Hermes Desktop plugin catalog offers one-click installs, but the '500 plugins' claim is unverified

• Product: Hermes Desktop, currently v0.21.5. It runs on macOS (Apple Silicon only), Windows 10/11 and Linux. It is the same agent as the CLI with a native interface (Hermes Atlas guide).
• Install flow: each catalog card has an "Open in Hermes Desktop" button. The install dialog shows the GitHub repo and lets the user pick a profile (video 1:29).
• Plugins shown in the video: Newswire, Tailscale, gateways for WhatsApp and Minecraft, Brave Search, voice, job search and Hermes Office (video 3:45; 5:01; 5:53).
• Example entry: Hermes Office is a community plugin by Adolanium with 16 GitHub stars, pinned at commit e1e0255 (catalog).

The documented mechanics are in the Hermes plugin docs:

• Plugin types: general plugins (tools, hooks, commands), plus memory providers, context engines and model providers. Only one memory provider and one context engine can be active at a time.
• Install links: Desktop registers a hermes://plugin/install?catalog=NAME link scheme. Catalog installs resolve to a reviewed, pinned commit, not the branch tip. Links that point to an arbitrary repo show a confirmation dialog first.
• Reproducibility: each install records its source and revision in metadata. Pins must be full commit SHAs; tags and branch names are rejected.
• Install-time scanning: a static scan returns safe, caution (requires --force) or dangerous (blocked).
• Isolation: setting plugins.isolation: host runs third-party plugins in a separate process per profile. The docs say 299 of 348 entries ran unmodified in that mode.

No independent evaluation of the catalog was found.

Plugins for Hermes existed before the catalog. Composio published a "tested and verified" top-10 list in May 2026, but it describes no testing method and ranks Composio's own plugin first (Composio). Third-party directories such as Hermes Atlas, which lists 250+ tools, and awesome-hermes-skills, which lists 350+, track the wider ecosystem. Their counts mix skills, tools and plugins, so they are not comparable to the catalog total.

• Review is limited: Nous says catalog review "is not a code audit." It also says capability grants are auditable but provide no isolation, so "a malicious plugin can ignore every gate" (docs).
• Creator's own caution: the video's main caveat is to check the repository before installing, because anyone may have written it (video 1:38). The companion article adds a warning that a plugin runs with the agent's access (juliangoldie.com).
• Conflict of interest: the source sells training. Its stated membership also differs between formats: 3,400 in the video (6:38) and 3,600+ in the post.
• Caption accuracy: the video quotes come from automatic captions, which may contain errors.

• Cost: plugins are free, so the real cost is vetting time and risk exposure.
• Safe adoption: install into a test profile, turn on host isolation, and prefer catalog pins over raw-repo links.
• Credentials: do not give unvetted plugins API keys, especially plugins for gateways, SSH or credentials.
• Developers: publishing a plugin requires a manifest that declares its capabilities, plus a full-SHA pin. A catalog listing now acts as a distribution channel inside Desktop.
• Leaders: treat catalog totals as a marketing figure. Judge each plugin by its maintenance and stars instead.