--- name: python-mastery category: coding description: Comprehensive Python mastery skill covering architecture, idiomatic code, design patterns, security, testing, performance, and deployment for production-grade Python applications. version: 1.0.0

--- name: secure-coding category: coding description: "Cross-language secure coding: OWASP Top 10, input validation, auth patterns, cryptography, supply chain security with concrete examples in Python, PHP, JS, Go, Java." version: 1.0.0 tags: [securi

### MCP Server Configuration ```yaml # ~/.hermes/config.yaml — MCP servers section mcp: servers: # Filesystem access - name: filesystem command: npx args: ["-y", "@modelcontextprotocol/server-filesystem", "/root/workspace"]

### Component Architecture ``` ┌─────────────────────────────────────────────────────────────┐ │ User Interfaces │ │ WebUI (HermesChat) │ WhatsApp (bridge.js) │ CLI │ └──────────┬────────────┴────

Complete mastery of OpenClaw — the open-source AI agent platform. Covers Docker gateway deployment, ClawHub skill ecosystem, browser automation (CamoFox/Patchright/Scrapling), multi-provider LLM confi

End-to-end CI/CD pipeline mastery — GitHub Actions, GitLab CI, Jenkins, deployment strategies, and release automation

Production database mastery — MySQL/MariaDB, PostgreSQL, Redis, backup strategies, replication, and query optimization

Discover, evaluate, and bulk-install Hermes Agent skills from community repos, official sources, and registries. Handles all skill types: standard SKILL.md, pip packages, Hermes plugins, and MCP serve

# Parse skill names (the '#' column has row numbers, name is column 2) hermes skills browse --size 100 --source official 2>&1 > /tmp/hub_browse.txt python3 -c " import re with open('/tmp/hub_browse.txt') as f: content = f.read() skills = re.finda

# Dependencies apt-get install -y python3-venv # needed for bootstrap.py's venv creation

Decomposition playbook + anti-temptation rules for an orchestrator profile routing work through Kanban. The "don't do the work yourself" rule and the basic lifecycle are auto-injected into every kanba

**Coding task:** ```python kanban_complete( summary="shipped rate limiter — token bucket, keys on user_id with IP fallback, 14 tests pass", metadata={ "changed_files": ["rate_limiter.py", "tests/test_rate_limiter.py"], "tests_

Production monitoring, observability, and SRE practices — Prometheus, Grafana, Alertmanager, Loki, Jaeger, OpenTelemetry, and incident management

Networking and SSL/TLS mastery — DNS, reverse proxies, TLS termination, CDN tuning, firewall rules, and certificate management

- **OpenClaw** (`github.com/openclaw/openclaw`) — AI agent platform with Docker gateway, browser automation, multi-provider LLM support, ClawHub skills marketplace - **Hermes WebUI** (`github.com/nesquena/hermes-webui`) — Web frontend for Hermes Agen

Discover, evaluate, install, and organize Hermes Agent skills from community repos and official sources. Handles parallel cloning, nested repo symlinking, frontmatter validation, token impact measurem

### Redis Cache-Aside Pattern ```python import redis import json

| Tool | Language | State | Multi-Cloud | Key Strength | |------|----------|-------|-------------|--------------| | **Terraform** | HCL | Yes | Yes | Largest ecosystem, provider registry | | **Pulumi** | Python/Go/TS/Java | Yes | Yes | Real programmi

# 4. Camoufox (browser automation) ssh root@ 'cd /usr/local/lib/hermes-agent && source venv/bin/activate && pip install camoufox && python -m camoufox.fetch'

Webhook subscriptions: event-driven agent runs.

[Service] Type=simple User=root WorkingDirectory=/var/www/whatsapp-chat ExecStart=/usr/local/lib/hermes-agent/venv/bin/python3 /var/www/whatsapp-chat/server.py Restart=always RestartSec=5