AgentsAutonomy & tool use
Nous Research ships Hermes Agent v0.23.1 as a Reddit post promises a '10X more powerful' setup
A Reddit post claims Nous Research's open-source Hermes Agent can be made ten times more powerful. The only reported performance figure is about 40% faster on similar tasks. Recent releases add cost controls, and a skills-scanner flaw affects versions before 0.15.0.
From the r/AISEOInsider (via last30days) article of November 11, 2026 and cited sources: The 10x claim has no measurement behind it. [2] [4]
SOURCES[2] TokenMix: Hermes Agent review tokenmix.ai[4] OPCL: 5 free Hermes Agent upgrades video summary opcldatabase.pages.dev
AT Pulse research deskPublished · Updated · 4 min read · AI-assisted analysisAI-assisted, not human-edited. Methodology Corrections Who owns this site
- Original source
- r/AISEOInsider (via last30days) article, independent perspective
- Brief by
- AT Pulse research desk AI-assisted; publisher and contact on the desk page
- When
- November 11, 2026 article published
- Covered
- Nov 11 edition
- Evidence
- 10 sources across 10 sites
- 1Reddit r/AISEOInsider postreddit.com
- 2TokenMix: Hermes Agent reviewtokenmix.ai
- 3NousResearch/hermes-agent GitHub releasesgithub.com
- 4OPCL: 5 free Hermes Agent upgrades video summaryopcldatabase.pages.dev
- 5Vulert: CVE-2026-9353vulertsecurity.com
- 6Hermes Agent docs (Nous Research)hermes-agent.nousresearch.com
Reach: not measured yet
The 10x claim has no measurement behind it. The only number available is Nous Research's own internal benchmark, which no one else has replicated: agents with 20 or more self-created skills finish similar tasks about 40% faster. That figure covers speed within the same domain, not output quality. A related creator video that promoted five 'upgrades' did not show a worked example. [2] [4]
Version 0.23.0 ('Hearth') merged about 1,950 pull requests. It adds a single gateway per conversation, a /rewind command, multi-machine Desktop, group-chat routing, plugin auto-update and spend limits for paid MCP tools. The 0.23.1 patch, released 9 November, raises the plugin-catalog size cap to 16 MiB. [3]
Hermes Agent is MIT-licensed and works with any model. It stores memory in plain MEMORY.md and USER.md files and recalls past sessions with SQLite full-text search plus LLM summaries, not vector embeddings. Skills follow the open agentskills.io format and load on demand, and Docker, SSH and hosted sandboxes can isolate execution. [6] [8]
CVE-2026-9353 (CVSS 7.3) affects versions before 0.15.0. A public write-up says the skills scanner relied on exact substring matching, so crafted injection payloads hidden in shared skills could get past it. Because the plugin catalog now has more than 1,050 entries, third-party skills and plugins should be treated as untrusted code. [5] [9] [3]
Release notes confirm the new features and spend limits, but no outside test supports the speedup. Teams considering Hermes should pilot it on their own tasks, track time and token use per task, pin versions and run community skills in a sandbox.
Sources are gathered; writing up the dossier now.
Executive brief
The post promises to make Hermes Agent "10X more powerful," but no reviewed source measures a 10x gain. The only performance number in circulation is Nous Research's own claim that agents with 20+ self-created skills finish similar tasks about 40% faster, and no one outside Nous has checked it (TokenMix). Hermes Agent itself is a real open-source (MIT) agent from Nous Research that changes quickly. Its latest release, v0.23.1, shipped on 9 November 2026 (GitHub releases). The "10x" framing comes from promotional creator content, not from measurement.
What changed and event timeline
Public launch
Nous Research released Hermes Agent as an open-source, self-improving agent. Reviewers later reported about 95,600 GitHub stars within seven weeks, a figure the article does not tie to an independent source ().
"10x better" video
Julian Goldie SEO promoted five "upgrades": an Agent OS built on soul.md files, Kanban sub-agent teams, an AI SEO skill, Hyperframe video templates, and a goals-plus-cron skill. An aggregator rated it promotional, with no worked example shown ().
CVE-2026-9353 disclosed
An injection flaw in the skills guard affects versions before 0.15.0. Its CVSS score is 7.3 ().
v0.23.0 "Hearth"
About 1,950 merged PRs. The release adds a single gateway per conversation,
/rewind, multi-machine Desktop, group-chat routing, plugin auto-update, and spend limits for paid MCP tools ().v0.23.1 patch
Rolls up about 618 PRs and raises the plugin-catalog size cap to 16 MiB to stop a silent fallback ().
Reddit post
r/AISEOInsider published "How to Make Hermes Agent 10X More Powerful." The linked post's text is only a submission line, and its specific recommendations are not documented in the reviewed sources ().
Capabilities and access
- Current version: v0.23.1, released 9 November 2026 (GitHub releases).
- Licence and model support: MIT-licensed and model-agnostic. It works with Nous Portal, OpenRouter, OpenAI or any custom endpoint (docs).
- Built-in tools: More than 60, including web search, browser automation, image generation and TTS. It also supports MCP servers with tool filtering (docs).
Read the full section
- Current version: v0.23.1, released 9 November 2026 (GitHub releases).
- Licence and model support: MIT-licensed and model-agnostic. It works with Nous Portal, OpenRouter, OpenAI or any custom endpoint (docs).
- Built-in tools: More than 60, including web search, browser automation, image generation and TTS. It also supports MCP servers with tool filtering (docs).
- Where it runs: As a persistent daemon that you can reach through Telegram, Discord, Slack or WhatsApp (Agentic AI docs).
Technical analysis for researchers and developers
- Memory: Two plain files, MEMORY.md for the agent's notes and USER.md for the user profile.
- Skills: Follow the agentskills.io standard and load on demand, so you can inspect, edit, version and share them (docs).
- Parallel work: Isolated subagents handle parallel workstreams.
execute_codelets the agent combine several tool calls into one step.
Read the full section
- Memory: Two plain files, MEMORY.md for the agent's notes and USER.md for the user profile. Cross-session recall uses SQLite FTS5 full-text search plus LLM summarization, not vector embeddings (fast.io review; docs).
- Skills: Follow the agentskills.io standard and load on demand, so you can inspect, edit, version and share them (docs).
- Parallel work: Isolated subagents handle parallel workstreams.
execute_codelets the agent combine several tool calls into one step. - Sandboxing: Terminal backends include Docker, SSH, Daytona, Modal and Vercel Sandbox, which gives you container isolation (docs).
- Reproducibility: No public benchmark harness backs the speedup claims.
Claims and evidence
- "10x more powerful": Not supported by any measurement in the reviewed sources (OPCL summary).
- 40% faster with learned skills: Comes from Nous Research's internal benchmarks and only applies within the same domain.
- "Zero agent-specific CVEs through April 2026": True only up to April. CVE-2026-9353 was disclosed in May (fast.io; Vulert).
Read the full section
- "10x more powerful": Not supported by any measurement in the reviewed sources (OPCL summary).
- 40% faster with learned skills: Comes from Nous Research's internal benchmarks and only applies within the same domain. It is not a quality gain and has no independent replication (TokenMix).
- "Zero agent-specific CVEs through April 2026": True only up to April. CVE-2026-9353 was disclosed in May (fast.io; Vulert).
- Release scale and features: Documented directly in the project's own release notes (GitHub releases).
Context and prior work
Nous Research is known for its Hermes series of fine-tuned open models, as well as Nomos and Psyche (docs). The agent's skill-file approach follows the open agentskills.io format rather than a proprietary memory store (fast.io). Much of the "10x" content around it comes from SEO-marketing creators, which is a different genre from technical evaluation (OPCL summary).
Limitations, safety and contested findings
- CVE-2026-9353: One write-up says the skills scanner used exact substring matching, so crafted injection payloads in shared skills could get past it (GitHub gist).
- Usability and trust: A review by a support-software vendor, which competes with Hermes for support use cases, cites slow startup, a flickery CLI, plagiarism allegations, and community advice to run the agent in a sandbox (eesel).
- Real cost: The same review estimates self-hosting at about $535 a month once maintenance labour is counted (eesel).
Read the full section
- CVE-2026-9353: One write-up says the skills scanner used exact substring matching, so crafted injection payloads in shared skills could get past it (GitHub gist). Vulert describes it as possible remote code execution and labels it "Moderate," even though 7.3 normally counts as High (Vulert).
- Usability and trust: A review by a support-software vendor, which competes with Hermes for support use cases, cites slow startup, a flickery CLI, plagiarism allegations, and community advice to run the agent in a sandbox (eesel).
- Real cost: The same review estimates self-hosting at about $535 a month once maintenance labour is counted (eesel).
Business and practitioner implications
- Read "10x" as marketing. Pilot on your own tasks and measure time and token use per task.
- Run at least 0.15.0, and treat third-party skills and plugins as untrusted code. The plugin catalog now has more than 1,050 entries (GitHub releases).
- Use the new spend limits for paid MCP tools to cap costs.
Read the full section
- Read "10x" as marketing. Pilot on your own tasks and measure time and token use per task.
- Upgrade before using community skills. Run at least 0.15.0, and treat third-party skills and plugins as untrusted code. The plugin catalog now has more than 1,050 entries (GitHub releases).
- Use the new spend limits for paid MCP tools to cap costs.
- Expect maintenance work. The release pace is very high, so pin versions.