--- name: hermes-webui-install description: "Install and configure Hermes WebUI (nesquena/hermes-webui) with nginx reverse proxy, SSL, and password auth." version: 1.0.0 metadata: hermes: tags: [webui, hermes, nginx, ssl, deploy, password-auth]

--- name: hermes-agent-mastery description: "Definitive mastery-level skill for Hermes Agent internals, configuration, and operations. Covers architecture, multi-provider LLM routing, gateway ops, skill authoring, cron/background jobs, memory/hindsig

--- name: secure-coding category: coding description: "Cross-language secure coding: OWASP Top 10, input validation, auth patterns, cryptography, supply chain security with concrete examples in Python, PHP, JS, Go, Java." version: 1.0.0 tags: [securi

### openclaw.json Configuration ```json { "port": 18789, "defaultModel": "chutes/zai-org/GLM-5-Turbo", "auth": { "password": "munaf", "maxLoginAttempts": 5, "sessionTimeout": "24h" }, "models": { "chutes/zai-org/GLM-5-Turbo"

Production-grade LEMP/LAMP stack: Nginx/Apache, PHP-FPM, MariaDB/MySQL, SSL/TLS, deployment, monitoring, and security hardening.

Mobile development mastery: Flutter, React Native, cross-platform patterns, security, testing, and deployment.

Comprehensive Next.js skill covering App Router architecture, rendering strategies, data fetching patterns, security hardening, testing, and production deployment.

```mermaid graph TB A[HTTP Request] --> B[PHP-FPM Worker] B --> C[Front Controller] C --> D[Middleware Stack] D --> E[Controller] E --> F[Service Layer] F --> G[Repository / Data Mapper] G --> H[(Database)] H --> I[Ent

Comprehensive Python mastery skill covering architecture, idiomatic code, design patterns, security, testing, performance, and deployment for production-grade Python applications.

React mastery: hooks deep dive, state management, component patterns, security, performance optimization, and testing.

permissions: contents: read id-token: write # OIDC for cloud auth security-events: write # CodeQL

### Backup with XtraBackup ```bash # Full backup xtrabackup --backup --target-dir=/backup/full --user=root --password=$PASS

```yaml apiVersion: v1 kind: Pod metadata: name: web-app labels: app: web version: v1 spec: serviceAccountName: web-sa securityContext: runAsNonRoot: true runAsUser: 1000 fsGroup: 2000 seccompProfile: type: Runti

```bash mkdir -p /root/.openclaw/workspace /root/.openclaw-auth-profile-secrets chmod -R 777 /root/.openclaw /root/.openclaw-auth-profile-secrets # Container runs as UID 1000 (node user) — needs write access ```

### Decision Tree ``` SSH hardening? ─┬─ Disable password auth ──→ key-only authentication ├─ Change default port ──→ obscurity (reduces bot noise, NOT real security) ├─ Limit root login ──→ PermitRootLogin no (use

Design scalable distributed systems using structured approaches — load balancing, caching, message queues, databases, and microservices

This script (`/usr/local/bin/hermes-sync`) does: 1. Installs Hermes if not present 2. Copies `.env`, `config.yaml`, `auth.json` 3. Rsyncs all 107 skills 4. Copies AGENTS.md/CLAUDE.md context 5. Installs Camoufox browser + Xvfb + systemd services 6. R

--- name: whatsapp-chat-viewer description: "Deploy and maintain the WhatsApp Chat Viewer — a Flask web app that reads Hermes session transcripts and displays them in a WhatsApp Web-like UI. Includes WhatsApp Bridge API integration for group name res

--- name: ai-agent-mastery description: "Comprehensive mastery of AI agent architecture, patterns, and engineering. Covers MCP server design, agent spawning/delegation, ACP protocol, x402 payment, memory systems, prompt engineering for agents, multi-

```html