PluginBench
Skill
Pass
Audit score 90

hermes-imports

affaan-m/everything-claude-code

Sanitize Hermes operator workflows for safe public reuse in ECC without leaking credentials or private state.

What is hermes-imports?

Converts local Hermes operator workflows into sanitized, reusable ECC skills by stripping private workspace state, credentials, and local paths. Use this when a repeated Hermes workflow is stable enough to share publicly without exposing sensitive data, account names, or local-only infrastructure.

  • Convert local paths to repo-relative paths or placeholders
  • Replace live account names with role labels (operator, default profile, workspace owner)
  • Describe credential requirements by provider name only, without exposing tokens or keys
  • Scan for and remove absolute paths, API keys, tokens, OAuth files, phone numbers, and private contact data
  • Generate candidate ECC skill names and sanitized workflow summaries
  • Identify remaining risks and required public inputs before publication

How to install hermes-imports

npx skills add https://github.com/affaan-m/everything-claude-code --skill hermes-imports
Claude Code
Cursor
Windsurf
Cline

How to use hermes-imports

  1. 1.Identify the repeatable operator loop in your Hermes workflow
  2. 2.Strip private inputs, outputs, and local workspace references
  3. 3.Rewrite local paths as repo-relative examples or placeholders
  4. 4.Convert one-off instructions into a 'When To Use' section and a short process description
  5. 5.Add concrete output requirements and success criteria
  6. 6.Run a secret and local-path scan using the provided sanitization checklist before committing
  7. 7.Return the candidate ECC skill name, sanitized summary, required public inputs, removed private inputs, remaining risks, and files to create or update

Use cases

Good for
  • Convert a repeated launch workflow into a public ECC skill with sanitized release-pack references
  • Transform a private inbox/finance/content check job into a scheduler policy description without exposing data sources
  • Prepare engineering or research workflows for team reuse by removing local-only paths and credentials
  • Create handoff documentation for content, launch, or operations workflows that reference only public artifacts
  • Audit a Hermes prompt for secrets and local paths before opening a pull request to ECC
Who it's for
  • Hermes operators preparing workflows for public ECC reuse
  • Teams standardizing internal workflows into shareable skills
  • DevOps and automation engineers sanitizing operator jobs for documentation
  • Content and launch teams creating reusable workflow templates

hermes-imports FAQ

What should I do if a workflow requires private state to function?

Keep it local in Hermes. Only import workflows that can be meaningfully executed with public inputs and outputs. If private data is essential, the workflow is not ready for ECC.

How do I handle account names and identifiers in workflows?

Replace live account names with role labels such as 'operator', 'default profile', or 'workspace owner'. Do not ship client names, family names, or non-public account identifiers.

What types of data should never be included in an imported ECC skill?

Never ship raw workspace exports, API keys, tokens, OAuth files, health data, CRM data, finance data, phone numbers, private email addresses, or raw logs from private systems.

Can I include examples in the sanitized workflow?

Yes, but keep examples narrow and operational. Use repo-relative paths and public data only.

What should the output contract include?

Return the candidate ECC skill name, sanitized workflow summary, required public inputs, list of private inputs removed, remaining risks, and files that should be created or updated.

Full instructions (SKILL.md)

Source of truth, from affaan-m/everything-claude-code.


name: hermes-imports description: Convert local Hermes operator workflows into sanitized ECC skills and release-pack artifacts. Use when preparing a Hermes workflow for public ECC reuse without leaking private workspace state, credentials, or local-only paths. metadata: origin: ECC

Hermes Imports

Use this skill when turning a repeated Hermes workflow into something safe to ship in ECC.

Hermes is the operator shell. ECC is the reusable workflow layer. Imports should move stable patterns from Hermes into ECC without moving private state.

When To Use

  • A Hermes workflow has repeated enough times to become reusable.
  • A local operator prompt should become a public ECC skill.
  • A launch, content, research, or engineering workflow needs sanitized handoff docs.
  • A workflow mentions local paths, credentials, personal datasets, or private account names that must be removed before publication.

Import Rules

  • Convert local paths to repo-relative paths or placeholders.
  • Replace live account names with role labels such as operator, default profile, or workspace owner.
  • Describe credential requirements by provider name only.
  • Keep examples narrow and operational.
  • Do not ship raw workspace exports, tokens, OAuth files, health data, CRM data, or finance data.
  • If the workflow requires private state to make sense, keep it local.

Sanitization Checklist

Before committing an imported workflow, scan for:

  • absolute paths such as /Users/...
  • ~/.hermes paths unless the doc is explicitly explaining local setup
  • API keys, tokens, cookies, OAuth files, or bearer strings
  • phone numbers, private email addresses, and personal contact graphs
  • client names, family names, or account names that are not already public
  • revenue, health, or CRM details
  • raw logs that include tool output from private systems

Conversion Pattern

  1. Identify the repeatable operator loop.
  2. Strip private inputs and outputs.
  3. Rewrite local paths as repo-relative examples.
  4. Turn one-off instructions into a When To Use section and a short process.
  5. Add concrete output requirements.
  6. Run a secret and local-path scan before opening a PR.

Example: Launch Handoff

Local Hermes prompt:

Read my local workspace files and finalize launch copy.

ECC-safe version:

Use the public release pack under docs/releases/<version>/.
Return one X thread, one LinkedIn post, one recording checklist, and the missing assets list.

Example: Quiet-Hours Operator Job

Local Hermes job:

Run my private inbox, finance, and content checks overnight.

ECC-safe version:

Describe the scheduler policy, the quiet-hours window, the escalation rules, and the categories of checks. Do not include private data sources or credentials.

Output Contract

Return:

  • candidate ECC skill name
  • sanitized workflow summary
  • required public inputs
  • private inputs removed
  • remaining risks
  • files that should be created or updated