channel-responder

47 / 100 · High risk

Only if you trust the author. Some of what it can do is expected: a coding skill usually runs build and test commands.

By gtapps/hermitd (GitHub) · coding · 84 stars · scanned at commit c2d971a

Handles inbound messages tagged <channel source=...> from Claude Code Channels, routing replies, task work, approvals, and operator controls with session context.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 54 places.

plugins/hermitd/scripts/browser-display.ts, line 4import { spawnSync } from 'node:child_process';
plugins/hermitd/scripts/browser-display.ts, line 126const children: ReturnType<typeof Bun.spawn>[] = [];
plugins/hermitd/scripts/browser-display.ts, line 142const xvnc = Bun.spawn(['Xvnc', owned.display, '-geometry', '500x1082', '-depth', '24', '-rfbport', '-1', '-rfbunixpath', vncSocket, '-rfbunixmode', '0600', '-S

Show 17 more

plugins/hermitd/scripts/browser-display.ts, line 151children.push(Bun.spawn(['openbox'], { env, stdin: 'ignore', stdout: 'ignore', stderr: 'inherit' }));
plugins/hermitd/scripts/browser-display.ts, line 160const child = Bun.spawn([process.execPath, path.join(import.meta.dir, 'browser-viewer.ts')], { env: { ...env, HERMIT_BROWSER_VIEWER_BIND: browserDisplaySettings
plugins/hermitd/scripts/evolve-plan.ts, line 431const proc = Bun.spawnSync(['claude', 'plugin', 'list', '--json'], {
plugins/hermitd/scripts/evolve-plan.ts, line 807const result = Bun.spawnSync(['git', 'merge-file', '-p', dest, entry.base_path, entry.theirs_path], { stdout: 'pipe', stderr: 'pipe' });
plugins/hermitd/scripts/hermitd-start.ts, line 17import { spawnSync } from 'node:child_process';
plugins/hermitd/scripts/hermitd-start.ts, line 616const result = spawnSync('claude', ['plugin', 'marketplace', 'list', '--json'], {
plugins/hermitd/scripts/hermitd-start.ts, line 1097const r = spawnSync('bun', [script, target, op], { stdio: 'pipe', encoding: 'utf-8' });
plugins/hermitd/scripts/hermitd-start.ts, line 1135const r = spawnSync('bun', [script, '.claude/settings.local.json', 'voice-render'], { stdio: 'pipe', encoding: 'utf-8' });
plugins/hermitd/scripts/hermitd-start.ts, line 1317const res = spawnSync(cmd[0], cmd.slice(1), { stdio: 'inherit' });
plugins/hermitd/scripts/hermitd-start.ts, line 1360const r = spawnSync(
plugins/hermitd/scripts/hermitd-start.ts, line 1715const result = spawnSync('tmux', ['new-session', '-d', '-s', sessionName, shellCmd], {
plugins/hermitd/scripts/lib/backup.ts, line 11import { spawnSync } from 'node:child_process';
plugins/hermitd/scripts/lib/backup.ts, line 187const res = spawnSync('git', ['-C', repoDir, '-c', `safe.directory=${repoDir}`, ...args], {
plugins/hermitd/scripts/lib/browser-runtime.ts, line 123const result = Bun.spawnSync(['ldd', chrome], { timeout: 5000, stdout: 'pipe', stderr: 'pipe' });
plugins/hermitd/scripts/lib/cc-compat.ts, line 23import { spawnSync } from 'node:child_process';
plugins/hermitd/scripts/lib/cc-compat.ts, line 119const r = spawnSync('git', ['rev-parse', '--git-dir', '--git-common-dir'], { timeout: 5000, encoding: 'utf8' });
plugins/hermitd/scripts/lib/channel-send.ts, line 171const child = Bun.spawn([script.abs], {

and 34 more places

Downloads and installs other software

The author does not mention this.

Found in 5 places.

plugins/hermitd/scripts/hermitd-start.ts, line 415'bun: required runtime not on PATH. Install with `curl -fsSL https://bun.sh/install | bash`, ' +
plugins/hermitd/scripts/render-docker-templates.ts, line 80'RUN apt-get update && apt-get install -y --no-install-recommends \\',
plugins/hermitd/scripts/render-docker-templates.ts, line 89'RUN apt-get update && apt-get install -y --no-install-recommends \\',

Show 2 more

plugins/hermitd/scripts/render-docker-templates.ts, line 92` npm install -g --allow-scripts=agent-browser agent-browser@${BROWSER_PINS.agent.version} && \\`,
plugins/hermitd/scripts/render-docker-templates.ts, line 165'# --- transcription ---\nARG HERMIT_TRANSCRIPTION=1\nRUN if [ "$HERMIT_TRANSCRIPTION" = 1 ]; then apt-get update && apt-get install -y --no-install-recommends

Sends data to these websites: bun.sh, storage.googleapis.com

The author does not mention this.

Found in 6 places.

plugins/hermitd/scripts/hermitd-start.ts, line 415'bun: required runtime not on PATH. Install with `curl -fsSL https://bun.sh/install | bash`, ' +
plugins/hermitd/scripts/lib/channel-chats.ts, line 65const response = await fetch(`${base}${route}`, {
plugins/hermitd/scripts/lib/channel-chats.ts, line 152const response = await fetch(`${base}${route}`, {

Show 3 more

plugins/hermitd/scripts/lib/channel-send.ts, line 107const resp = await fetch(url, { ...request, signal });
plugins/hermitd/scripts/render-docker-templates.ts, line 97` curl -fsSL "https://storage.googleapis.com/chrome-for-testing-public/${BROWSER_PINS.chrome.version}/\${platform}/chrome-\${platform}.zip" -o /tmp/chrome.zi
plugins/hermitd/scripts/render-docker-templates.ts, line 102` curl -fsSL ${BROWSER_PINS.novnc.url} -o /tmp/novnc.tgz && \\`,

Reads your saved credentials, such as SSH keys or .env files

The author does not mention this.

Found in 1 place.

plugins/hermitd/scripts/lib/backup.ts, line 228try { content = fs.readFileSync(path.join(root, '.env'), 'utf-8'); } catch { return null; }

Changes files outside its own folder

The author does not mention this.

Found in 4 places.

plugins/hermitd/scripts/render-docker-templates.ts, line 105" printf '%s\\n' '#!/bin/sh' 'if [ ! -f \"${HERMIT_PLUGIN_ROOT:-}/scripts/browser-agent.ts\" ]; then echo \"agent-browser: hermit plugin unavailable\" >&2; e
plugins/hermitd/scripts/render-docker-templates.ts, line 107' mkdir -p /etc/hermit && touch /etc/hermit/managed-browser',
plugins/hermitd/scripts/render-docker-templates.ts, line 113.replace('touch /etc/hermit/managed-browser', "printf 'display=plugin\\n' > /etc/hermit/managed-browser; " + '\\' + '\n fi\n# --- end managed browser ---');

Show 1 more

plugins/hermitd/scripts/render-docker-templates.ts, line 124return `RUN mkdir -p /etc/claude-code/managed-settings.d && printf '%s\\n' ${quoted} > /etc/claude-code/managed-settings.d/hermitd-channels.json`;

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'channel-responder' ] || [ -L ~/.agents/skills/'channel-responder' ]; then echo 'A skill folder named channel-responder already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/gtapps/hermitd' "$d" && git -C "$d" checkout --quiet 'c2d971ab801daa0725f1554f92e405e62f76a3e8' -- 'plugins/hermitd/skills/channel-responder' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/hermitd/skills/channel-responder' ~/.agents/skills/'channel-responder' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'channel-responder' ~/.claude/skills/'channel-responder' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for gtapps/hermitd shows the score of its lowest-scoring skill.

SkillTrust badge for gtapps/hermitd

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/gtapps/hermitd.svg)](https://zalavijaysinh.github.io/skilltrust/repos/gtapps/hermitd/)

Score history

Date	Version	Score
2026-11-13	`c2d971a`	47
2026-11-09	`e69a48c`	47
2026-11-07	`84942b7`	47