---
name: "Hermes SKILL.md — delegate coding to grok -p (no --always-approve on audits)"
description: "Use when Hermes should delegate coding to grok -p and must not --always-approve on audits."
---

# Hermes SKILL.md — delegate coding to grok -p (no --always-approve on audits)

## When
Use when the Hermes agent owns orchestration and Grok Build owns the code.

## Stop
No --always-approve on audits. Never treat grok -p as already-approved production.

## Steps
1. Prefer headless -p; structured output via --output-format json.
2. Always set workdir or --cwd.
3. Pass --no-auto-update in every automated invocation.
4. Use --always-approve only when Grok should write; omit it for read-only reviews.
5. Background long tasks with background=true, notify_on_complete=true.
6. Use tmux for multi-turn interactive work; monitor with tmux capture-pane -t <session> -p -S -50.
7. Verify ~/.grok/auth.json — Hermes x_search OAuth does NOT mean grok CLI is logged in.
8. Report what Grok changed and what's left.

## Load
Hermes grok SKILL.md. grok -p. Audit without always-approve.