iap

Read-only diagnostics for Hermes configuration: /hermes-doctor in-session and hermes guide in a terminal. Seven read-only health checks (config, mcp, skills, commands, hooks, plugins, memories) and points to 20 troubleshooting skills, installed separately as a skills tap, for what the built-in doctor doesn't cover. Complements — never replaces — hermes doctor. Disclosure — reads config.yaml, SKILL.md frontmatter, skill bundles, plugin manifests, the shell-hooks allowlist and the built-in MEMORY.md/USER.md stores read-only (the report quotes short memory snippets); /hermes-doctor and hermes guide run hermes config path and hermes hooks doctor as subprocesses (argument list, no shell), and hermes hooks doctor executes every approved shell hook once with a synthetic payload; with opt-in proactive: true it runs the checks in-process at each session start/end (no hooks executed) and once per process runs git ls-remote against the plugin's GitHub repo to log a newer-release notice (no download, no local writes). The 20 troubleshooting skills are not loaded by the plugin: they install separately from the repo as a skills tap, which this entry's pin does not cover.