hermes-shield-scanner
Last released
Read-only static scanner for AI-agent codebases: finds dangerous action sinks, traces reachability from real entry points (with an opt-in sandboxed proof lane), attributes guard coverage, and rates findings honestly (reachable-in-repo vs install-liability).
