NousResearch/hermes-plugin-snyk

NousResearch/hermes-plugin-snyk

Description: Hermes Agent plugin: Snyk code/dependency/container/IaC scanning via Snyk's first-party MCP server, with the snyk-security-scan skill bundled (Agent Plugins v1)

License: MIT

Stars: 2

Forks: 1

Open issues: 0

Created: 2026-09-12T12:53:48Z

Pushed: 2026-09-12T13:00:39Z

Default branch: main

Fork: no

Archived: no

README:

hermes-plugin-snyk

Scan code, dependencies, container images, IaC and SBOMs from Hermes Agent through Snyk's first-party MCP server. Snyk ships the server *inside* the Snyk CLI (snyk mcp is a vendor subcommand, not a community wrapper), so this plugin is a pinned npx stdio launch plus a workflow skill.

This is a portable Agent Plugins v1 package. One install ships:

• mcp.json — the Snyk MCP server entry (sn), registered for every new

session while the plugin is enabled. No mcp_servers edits in config.yaml.

• skills/snyk-security-scan/ — the workflow skill: when to use which

scanner, the auth/trust/scan/fix loop, pitfalls, and a full per-tool argument reference generated from the live server.

Install

hermes plugins install snyk # from the Nous plugin catalog
hermes plugins enable snyk

Then start a new Hermes session. The skill is available as agent-plugin-snyk-8cb0f11d:snyk-security-scan via skill_view (skills_list shows the exact name). Node.js/npm must be on PATH (the server is launched with npx -y snyk@1.1306.0 mcp -t stdio --profile full). The first launch downloads the pinned CLI.

No credentials are needed at install time. Ask Hermes to run the snyk_auth tool before the first scan: it opens Snyk's browser login and stores the token in the Snyk CLI's own config, never in Hermes. A free Snyk account covers the code (SAST) and open-source (SCA) scanners.

Health check without Hermes:

npx -y snyk@1.1306.0 mcp -t stdio --profile full --DISABLE_ANALYTICS ` (the hash
is derived from the install directory name `snyk`). The
server key is `sn` rather than `snyk` because the longest tool name
(`snyk_package_health_check`) lands exactly on the 64-character function-name
cap of OpenAI-compatible wire formats with a `snyk` key; `sn` keeps every
name at 62 or less.

## Privacy and telemetry

- Snyk CLI usage analytics are disabled at launch (`--DISABLE_ANALYTICS` and
`SNYK_DISABLE_ANALYTICS=1`).
- `snyk_send_feedback` reports issue-count deltas back to Snyk. The skill
tells the agent to treat it as opt-in and never call it unprompted.
- The scans themselves are network calls: SAST uploads source, SCA uploads
the dependency graph, to Snyk's cloud for analysis. The skill tells the
agent to ask before scanning private repositories.
- `snyk_trust` grants Snyk permission to scan a folder on the user's machine.
The skill restricts it to the folder the user asked to scan.

## Version pinning

`mcp.json` pins `snyk@1.1306.0` (published 2026-07-09). Bumping the pin is a
commit to this repo followed by a reviewed SHA bump in the
[hermes-agent plugin catalog](https://github.com/NousResearch/hermes-agent/tree/main/plugin-catalog).
`@latest` is deliberately not used.

## Attribution

Catalog research, tool pruning rationale and validation originate from
[hermes-agent #73860](https://github.com/NousResearch/hermes-agent/pull/73860),
re-homed here as a standalone plugin per the hermes-agent policy that
third-party product integrations ship outside the core tree. Snyk and the
Snyk CLI are products of Snyk Ltd. MIT.