hermes-agent/plugins/hermes-achievements
Eugeniusz Gilewski 8845f3316c fix(security): restrict dashboard plugin backend import to bundled plugins (#43719)
Defense-in-depth for the dashboard plugin auto-import path. The web server
auto-imports and mounts the Python backend (dashboard/manifest.json -> api file)
of plugins found in ~/.hermes/plugins/ (user) and ./.hermes/plugins/ (project),
not just bundled plugins. So any plugin that reaches one of those dirs gets
arbitrary Python executed on the next dashboard start.

NOTE ON THREAT MODEL: #43719's originally-documented delivery chain (a public
--insecure dashboard + open API used to git clone a malicious repo into
~/.hermes/plugins/) is ALREADY mitigated on main — since the June 2026
hermes-0day hardening, a non-loopback bind ALWAYS requires an auth provider and
--insecure no longer bypasses the auth gate. This change is therefore NOT
closing that (now-authenticated) network path; it removes the residual
'arbitrary code executes merely because a plugin is on disk' hazard, which still
applies when a plugin arrives by other means: a socially-engineered git clone,
a supply-chain drop, an authenticated-but-malicious actor, or a future
regression in the auth gate. Untrusted on-disk code should not auto-execute.

Restrict dashboard backend Python auto-import to BUNDLED plugins only. User and
project plugins may still extend the dashboard UI via static JS/CSS, but their
api Python file is never auto-imported. Two layers: _discover_dashboard_plugins
scrubs api/_api_file for user/project sources (and bundled wins name conflicts
so a non-bundled plugin cannot shadow a trusted backend route);
_mount_plugin_api_routes re-refuses user/project at mount time. Tightens the
prior GHSA-5qr3-c538-wm9j / #29156 hardening (bundled+user) to bundled-only.

Salvaged from #44472 (@egilewski) onto current main.
2026-06-22 17:51:37 +05:30
..
dashboard fix(dashboard): sanction plugin WS/upload auth via SDK helpers (gated mode) 2026-06-03 16:59:36 -07:00
docs
tests
LICENSE
README.md fix(security): restrict dashboard plugin backend import to bundled plugins (#43719) 2026-06-22 17:51:37 +05:30

Hermes Achievements

Bundled with Hermes Agent. Originally authored by @PCinkusz at https://github.com/PCinkusz/hermes-achievements — vendored into plugins/hermes-achievements/ so it ships with the dashboard out-of-the-box and stays in lockstep with Hermes feature changes. Upstream repo remains the staging ground for new badges and UI iteration.

When Hermes is installed via pip install hermes-agent or cloned from source, this plugin auto-registers as a dashboard tab on first hermes dashboard launch. No separate install step. See Built-in Plugins → hermes-achievements in the main docs.

Achievement system for the Hermes Dashboard: collectible, tiered badges generated from real local Hermes session history.

Hermes Achievements dashboard

The screenshots use temporary demo tier data to show the full visual range. The plugin itself reads real local Hermes session history by default.

Update notice (2026-04-29): If you installed this plugin before today, update to the latest version. The achievements scan path was refactored for much faster warm loads (snapshot cache + incremental checkpoint scan).

Share cards (2026-05-04, vendored in hermes-agent v0.4.0): Unlocked achievement cards now have a "Share" button that renders a 1200×630 PNG share card (client-side canvas, no backend, no network) with Download + Copy-to-clipboard actions. Fits X/Twitter, Discord, LinkedIn, Bluesky link-preview dimensions.

What it does

Hermes Achievements scans local Hermes sessions and unlocks badges based on real agent behavior:

  • autonomous tool chains
  • debugging and recovery patterns
  • vibe-coding file edits
  • Hermes-native skills, memory, cron, and plugin usage
  • web research and browser automation
  • model/provider workflows
  • lifestyle patterns such as weekend or night sessions

Achievements have three visible states:

  • Unlocked — earned at least one tier
  • Discovered — known achievement, progress visible, not earned yet
  • Secret — hidden until Hermes detects the first related signal

Most achievements level through:

Copper → Silver → Gold → Diamond → Olympian

Each card has a collapsible What counts section showing the exact tracked metric or requirement once the user wants details.

Version 0.2.x expands the catalog to 60+ achievements, including model/provider badges such as Five-Model Flight, Provider Polyglot, Claude Confidant, Gemini Cartographer, and Open Weights Pilgrim.

Examples

  • Let Him Cook
  • Toolchain Maxxer
  • Red Text Connoisseur
  • Port 3000 Is Taken
  • This Was Supposed To Be Quick
  • One More Small Change
  • Skillsmith
  • Memory Keeper
  • Context Dragon
  • Plugin Goblin
  • Rabbit Hole Certified

Install

Clone into your Hermes plugins directory:

git clone https://github.com/PCinkusz/hermes-achievements ~/.hermes/plugins/hermes-achievements

For local development, keep the repo elsewhere and symlink it:

git clone https://github.com/PCinkusz/hermes-achievements ~/hermes-achievements
ln -s ~/hermes-achievements ~/.hermes/plugins/hermes-achievements

Then rescan dashboard plugins:

curl http://127.0.0.1:9119/api/dashboard/plugins/rescan

When installed as a user plugin, the dashboard UI loads but Python backend API routes are not auto-imported. Backend routes are available when this plugin is bundled with Hermes.

Updating

If you installed with git:

cd ~/.hermes/plugins/hermes-achievements
git pull --ff-only
curl http://127.0.0.1:9119/api/dashboard/plugins/rescan

For a user-installed plugin at ~/.hermes/plugins/hermes-achievements, a plugin rescan is enough because Python backend routes are not auto-imported. If you update the bundled plugin by pulling changes in the hermes-agent repository, and that bundled plugin update changes backend routes or plugin_api.py, restart hermes dashboard after pulling.

As of 2026-04-29, updating is strongly recommended because scan performance changed significantly:

  • removed duplicate /overview scan path
  • added cached /achievements snapshot
  • added incremental checkpoint reuse for unchanged sessions

Achievement unlock state is stored locally in state.json and is not overwritten by git updates. New achievements are evaluated from your existing Hermes session history. Achievement IDs are stable and should not be renamed casually because they are the unlock-state keys.

Releases are tagged in git, for example:

git fetch --tags
git checkout v0.2.0

Files

dashboard/
├── manifest.json
├── plugin_api.py
└── dist/
    ├── index.js
    └── style.css

API

These backend routes are mounted for the bundled plugin. User-installed copies load their dashboard UI but do not auto-import Python backend routes.

Routes are mounted under:

/api/plugins/hermes-achievements/

Endpoints:

GET  /achievements
GET  /scan-status
GET  /recent-unlocks
GET  /sessions/{session_id}/badges
POST /rescan
POST /reset-state

Development

Run checks:

node --check dashboard/dist/index.js
python3 -m py_compile dashboard/plugin_api.py
python3 -m unittest tests/test_achievement_engine.py -v

License

MIT