GitHub profilePlugins by web3blind
4 plugins by web3blind in the catalog, most-starred first.
web3blindsecure-env-ingressOne-use HTTPS forms for missing environment secrets, native encrypted Browser Vault logins/TOTP setup keys and payment cards, retained exact-parent login/password and saved TOTP filling, protected payment-field filling, nested verification codes/passcodes and guarded indexed code groups, and approved secret operations outside chat and LLM input. Disclosure — /senv setup supplies a skill using sudo for host packages and TLS setup after approval; the TLS listener binds all interfaces by default; pre_gateway_dispatch observes gateway messages to bind commands to their sender. Interactive Telegram secret entry uses secure_env_vault; secure_login_fill consumes existing native Vault handles without registering a login backend. Browser writes require an explicitly selected existing parent and the public captured-CDP dispatch API, retain the original transport and exact document/control guards, and fail closed on reconnect, profile or human-control lease changes; tab creation ownership is not required. No native fill fallback or explicit site-form submission occurs. Payment filling requires separate native consent; explicit resume requires existing nonempty values to match Vault. Card storage includes encrypted CVC. Site input callbacks, especially 3-D Secure, may authorize or auto-submit an operation. Unknown outcomes require external verification before retry. secure_operation executes administrator-allowlisted, SHA-256-pinned external Python consumers with gateway privileges; consumers are trusted, not sandboxed, and none are enabled by default. Secret input is not persisted by this mode; consumers must enforce their own handling policy. Links are bearer authorization, not submitter identity; cancellation cannot stop an already-running consumer. Setup bootstrap reads the profile .env directly to obtain TELEGRAM_ALLOWED_USERS owner IDs.Communitytools1web3blindvk-platformVK Messenger gateway with community Long Poll, media attachments, allowlists, and project-lane routing.Communityplatform1web3blindchrome-tab-watchdogConservative Chrome tab cleanup with in-process observation and browser-call leases. Disclosure — runs a background thread inside Hermes that proxies your local Chrome DevTools port (127.0.0.1:9222 → 127.0.0.1:9223, loopback only, you must point browser.cdp_url at it), injects a focus/activity listener into every Chrome page, rewrites browser_exec session names to a per-profile namespace, and a cron script you schedule auto-closes idle, duplicate and blank tabs (including tabs with unsaved text).Communityautomationweb3blinddeferred-questionsDurable non-blocking questions with exact answer binding and gateway continuation. Disclosure — pre_gateway_dispatch sees gateway messages, accepts answers only from the stored recipient and route, and may consume recognized stale/completed inputs; with enable_tool on, the model can send questions to any chat the gateway already authorizes, and continue_agent resumes the target chat with the answer; questions and answers are stored unencrypted in $HERMES_HOME/deferred-questions/questions.sqlite3; profile-local Unix-socket notices wake event-driven workers; pre_llm_call/on_session_end observe current input, turn IDs and terminal status to correlate technical completion for payload retirement, not business success or delivery; automatic header-only repair preserves originals in quarantine, and text-free receipts retain caller-supplied idempotency keys and request hashes; private gateway and adapter APIs can break after a Hermes update.Communityautomation
