cipoklean

GitHub profile1 plugin in the catalog

Plugins by cipoklean

1 plugins by cipoklean in the catalog, most-starred first.

cipokleanxraySets traps for plugins instead of watching them. hermes xray detonate runs a plugin in a throwaway child process with a fake home full of honeytokens, fuzzes its tools, fires its hooks and replays it at +30 and +90 days to catch time-bombs, then gives a RED/AMBER/GREEN verdict with file:line proof, a per-version behaviour diff and a drafted disclosure line. Opt-in live bait flags any installed plugin that reads a decoy credential file and can route its next tool call to Hermes' approval prompt. Disclosure — spawns child Python processes to detonate plugins; the child runs as you (fake HOME, real keys stripped) and is not an OS sandbox, so its egress and spawn blocking (Python audit hooks, incl. fork and fork_exec) is a tripwire native code can bypass; reads of your real credential stores are refused and make the verdict RED; runs git clone when you detonate a remote repo, including from the dashboard's detonate button; by default (bait_runtime) installs a Python audit hook in the Hermes process that watches for plugins touching bait files or honeytokens; reads installed plugins' source dirs to attribute events; bait plant (opt-in) writes decoy files only into empty default credential paths of the AWS CLI/SDKs, git credential store, ssh and Solana CLI, so those tools use the fake values until bait remove, which deletes only unchanged files it wrote; enforce (off by default) uses pre_tool_call approve; no LLM calls, no telemetry; X-Ray itself never reads real credentials or patches Hermes core.Communitytools