Keep · hermes SKILL.md

Hermes SKILL.md — delegate coding to grok -p (no --always-approve on audits)

WhenUse when the Hermes agent owns orchestration and Grok Build owns the code.

StopNo --always-approve on audits. Never treat grok -p as already-approved production.

Steps

Prefer headless -p; structured output via --output-format json.
Always set workdir or --cwd.
Pass --no-auto-update in every automated invocation.
Use --always-approve only when Grok should write; omit it for read-only reviews.
Background long tasks with background=true, notifyoncomplete=true.
Use tmux for multi-turn interactive work; monitor with tmux capture-pane -t <session> -p -S -50.
Verify ~/.grok/auth.json — Hermes xsearch OAuth does NOT mean grok CLI is logged in.
Report what Grok changed and what's left.

LoadHermes grok SKILL.md. grok -p. Audit without always-approve.

SourceMatt Maximo (MattMaximo) / Hermes Agent

---
name: Hermes SKILL.md — delegate coding to grok -p (no --always-approve on audits)
description: Use when the Hermes agent owns orchestration and Grok Build owns the code.
---

# Hermes SKILL.md — delegate coding to grok -p (no --always-approve on audits)

When: Use when the Hermes agent owns orchestration and Grok Build owns the code.
Stop: No --always-approve on audits. Never treat grok -p as already-approved production.

1. Prefer headless -p; structured output via --output-format json.
2. Always set workdir or --cwd.
3. Pass --no-auto-update in every automated invocation.
4. Use --always-approve only when Grok should write; omit it for read-only reviews.
5. Background long tasks with background=true, notifyoncomplete=true.
6. Use tmux for multi-turn interactive work; monitor with tmux capture-pane -t <session> -p -S -50.
7. Verify ~/.grok/auth.json — Hermes xsearch OAuth does NOT mean grok CLI is logged in.
8. Report what Grok changed and what's left.

Load: Hermes grok SKILL.md. grok -p. Audit without always-approve.