DEDUPED Hot AI repos, turned into use cases Get the Monday 5

How to scan code and dependencies for security issues with Snyk with Hermes Official Plugins

Install the Snyk plugin so Hermes can run code, dependency, container and IaC scans through Snyk's MCP server.

Short answer: Install Node.js and npm, which the plugin requires; then create a free Snyk account; run hermes plugins install snyk. All steps.

Who it is forA developer or security reviewer who wants an agent to run Snyk scans on a project before release.

The problemRunning several separate Snyk scans by hand and reading the results across code, dependencies and infrastructure takes time.

The outcomeHermes runs SAST, dependency, container, IaC and SBOM scans through Snyk and follows the bundled security scan workflow.

What you need first

  • Hermes Agent installed (the README gives a curl install script in the hermes-agent repo)
  • The hermes CLI available in your terminal
  • Accounts and credentials for the specific service you connect, such as Home Assistant, Spotify, Langfuse, Snyk or X
  • Each plugin's own requirements, shown by hermes plugins info <name>

Steps

  1. Install Node.js and npm, which the plugin requires.
  2. Create a free Snyk account.
  3. Run hermes plugins install snyk.
  4. Ask Hermes to run snyk_auth, which opens a browser login.
  5. Ask Hermes to run the snyk-security-scan workflow on your project folder.

Prompt for your agent

Using the repo NousResearch/hermes-official-plugins, install the snyk plugin, complete snyk_auth, then run the snyk-security-scan workflow on <project-path>. Expected output is a summary of code, dependency and IaC findings; verify that the finding count matches the scan report shown in your Snyk account.

Caveat. The plugin needs Node.js and npm and a Snyk account, and the README does not describe what happens to scanned code beyond the scan itself.

Use this in your AI agent

Ask your agent

Using the Deduped MCP, get the setup steps for NousResearch/hermes-official-plugins and "Scan code and dependencies for security issues with Snyk"

Add Deduped to Claude Code once

claude mcp add --transport http deduped https://dedupedai.com/mcp

Cursor, ChatGPT, others

Share: X LinkedIn Hacker News Email Copy link

Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer