skills

Install, update, and manage the Hermes One desktop app via the `hermesone` npm package. Use when a user wants to set up Hermes One, install or upgrade it from the command line, check the installed version, preview a release before installing, pin a specific version, or drive the installer programmatically from Node. Triggers on mentions of hermesone, Hermes One, Hermes Desktop (the former name), or installing/updating the Hermes app.

Personal AI Operating System on Base. Use when an agent wants to analyze any Base token (live price, risk verdict, liquidity), chat with 19 frontier AI models (Claude, GPT-4o, Grok, Gemini, DeepSeek), deploy or manage B20 tokens (Base Beryl native precompile — config validation, ABI-encoded deployment tx, live gas + nonce from Base RPC), check ETH or ERC-20 balances, get current gas prices, read any ERC-20 on Base, or verify a tx receipt. No auth required.

AI-powered crypto trading agent, wallet API, and LLM gateway via natural language. Use when the user wants to trade crypto, check portfolio balances (with PnL and NFTs), view token prices, search tokens, transfer crypto, manage NFTs, use leverage (Hyperliquid or Avantis), bet on Polymarket, deploy tokens, set up automated trading, sign and submit raw transactions, call or deploy x402 paid API endpoints, browse the web, or access LLM models through the Bankr LLM gateway funded by your Bankr wallet. Supports Base, Ethereum, Polygon, Solana, Unichain, World Chain, Arbitrum, and BNB Chain.

Non-custodial perpetual DEX on Arbitrum with an autonomous trading agent. Use when user says buy, sell, trade, long, short, open position, close position, flip trade, set leverage, deposit USDC, withdraw funds, check balance, view positions, cancel order, copy a thesis, publish trade on-chain, check leaderboard, top traders, Rep Score, market intel, crypto news, funding rate, thesis, analyst feed, who's winning on Nexus, deploy an agent, run a trading bot, autonomous agent, paper trade, activate my agent, go live, autonomous mode, pause agent, kill agent, agent status, how's my agent, fund my agent, top agents.

Find and complete paid tasks on the 0xWork decentralized marketplace (Base chain, USDC escrow). Use when: the agent wants to earn money/USDC by doing work, discover available tasks, claim a bounty, submit deliverables, post tasks with bounties, check earnings or wallet balance, sell digital products, list services, or set up as a 0xWork worker/poster. Task categories: Writing, Research, Social, Creative, Code, Data. NOT for: managing the 0xWork platform or frontend development.

HSM-backed secret management for AI agents. Store API keys (including Bankr `bk_` keys), passwords, and credentials in an encrypted vault; retrieve them at runtime via MCP without keeping secrets in chat context. Bankr Dynamic Key Vending issues short-lived scoped `bk_usr_` keys from a partner key (`bk_ptr_`) without manual rotation. Policy-based access control, secret rotation, sharing, EVM transaction intents (sign/simulate/broadcast), multi-chain signing keys, treasury multisig proposals, OIDC federation for external service auth, built-in prompt injection detection, and optional Shroud TEE LLM proxy. Use when the agent needs secure credential storage, just-in-time secret access, guarded on-chain signing, or security scanning — not for Bankr trading prompts, portfolio checks, or x402 calls (use the bankr skill instead).

Evolve any installed skill by generating four variations along separate theses (better inputs / sharper output / more robust / rethink), scoring them on a weighted rubric, and applying the winner. Never downgrades a working skill — aborts cleanly if no variation improves the original. Use when an installed skill is producing low-signal output, hitting deprecated APIs, or feels stale. Triggers: "improve this skill", "evolve $skill", "auto-research my X", "regenerate variations".

Weekly funding round tracker across configurable verticals (AI, crypto, prediction markets, agentic infrastructure, etc.). Primary-source-required (Form D, press release, or verified founder/firm post) — filters re-announcements and rumored rounds. Per round: lead, size, valuation if disclosed, what they do, why now, and the sharpest risk. Triggers: "this week in funding", "deal flow", "who raised this week", "crypto funding rounds", "AI funding tracker".

Exhaustive multi-source research on a topic with attributed claims, a mandatory adversarial counterpoint, and an open-questions list. Analyst-grade — claims are tagged with source class (primary / expert / secondary / market signal) and confidence, contradicting sources are named rather than averaged. Use when the cost of being wrong exceeds an hour of research. Triggers: "deep research X", "DD on Y", "build me a memo on Z", "contrarian take on X".

Watchlist monitor for DeFi pools, lending markets, and vaults. Surfaces only changed entries — APR floor breached, utilization ceiling hit, TVL delta above threshold, health factor approaching liquidation, or position PnL crossed your alert. Bankr-ready Submit payload attached when an alert recommends action. Silent on quiet members. Triggers: "check my defi positions", "monitor these pools", "yield check on Aave/Compound", "is my LP underwater", "pool health for X".

Daily DeFi read — regime verdict (RISK-ON / NEUTRAL / RISK-OFF) reproducible from named inputs, top TVL movers with one-line causal reasoning, and a sustainable-vs-incentive yield split so the operator can tell real product-market fit from emissions-pumped APY. Public APIs only. Triggers: "DeFi read", "DeFi regime today", "yield decomposition", "is this APY real or emissions", "DeFi movers with why".

Batch token payouts via the Bankr Wallet API with per-recipient idempotency, two-phase resolve→execute, dry-run preview, and recovery from partial runs. Re-runs within the same UTC day are a no-op for completed rows. Use for weekly contributor rewards, tip pools, leaderboard payouts — any "pay N wallets X amount" flow where double-sending must be impossible. Triggers: "distribute tokens", "pay contributors", "weekly payout", "send USDC to this list", "tip these handles".

Top Hacker News stories filtered by interest tags, with comment-mined insights (top, dissenting, expert/builder) and themed clustering. Comments often beat the post — this skill extracts the highest-signal threads rather than just listing front-page links. Triggers: "top HN today", "hacker news digest", "what's on hn", "best comments today".

Trending Hugging Face models, datasets, and spaces — filtered by license sanity, dedup vs same-week quantizations, with a "why notable" line per pick (architecture shift, size step, license change, notable author). Surfaces what's actually shifting rather than just popular. Triggers: "trending on HF", "what models are hot", "huggingface trending", "new spaces today", "best new datasets".

Cross-platform 30-day social research on a topic — Reddit, X/Twitter, Hacker News, Polymarket, open web. Clusters mentions by narrative, ranks by velocity (not raw volume), and surfaces the contrarian thread with traction (the cheapest signal). Source-tags every claim so a Reddit consensus and an HN consensus are weighted differently. Triggers: "research topic over 30 days", "what is everyone saying about X", "cross-platform research", "find the contrarian take on Y".

Watchlist-driven Kalshi prediction-market monitor with cross-venue arb detection vs paired Polymarket markets (fee + slippage adjusted). Surfaces price moves, volume spikes, resolution proximity, and kill-criterion triggers on tracked positions. Silent on unchanged markets. Requires a CFTC-compliant Kalshi account. Triggers: "watch my kalshi markets", "did anything move on kalshi", "kalshi vs polymarket on X", "alert on price changes for my kalshi watchlist".

Watchlist-driven Polymarket monitor. Surfaces only markets with 24h price moves above threshold, volume spikes, fresh comments from watched accounts, or resolution-date proximity. Position context for tracked entries. Bankr-ready Submit payload attached when action is recommended. Silent on unchanged markets. Triggers: "watch my polymarket positions", "did anything move on polymarket", "alert on price changes for my markets", "polymarket comment digest".

Top 5 tokens that ran hardest in the past 24h across major chains via GeckoTerminal — with pump-risk filters (low liquidity, wash volume, concentrated holders, fresh pools). Chain leaderboard at the top doubles as a rotation signal. No API key required. Use for intraday momentum scans or short-horizon pre-trade discovery. Triggers: "top runners today", "what's pumping on Base", "biggest movers", "chain rotation check".

Daily narrative map for crypto and AI. Each narrative gets a mindshare score (1-5), a velocity arrow (↑↑ ↑ → ↓ ↓↓), a phase label (Emerging / Rising / Peak / Fading), named drivers (@handles, not "people are saying"), and an explicit position call (FRONT-RUN / RIDE / FADE / WATCH / IGNORE). Drops narratives that grade IGNORE. Surfaces transitions vs prior runs as the headline. Triggers: "track narratives", "what's running on CT", "is X peaking", "narrative positions today".

Watchlist monitor over blockchain addresses and contracts. Surfaces large transfers, new approvals, contract upgrades, unusual gas spends, MEV interactions, and first-time interactions with new contracts. Silent on quiet members. Pluggable RPC layer (Bankr / Quicknode / Alchemy / public). Triggers: "watch this wallet", "monitor address X", "alert on 0x...", "did the multisig move funds", "track this contract".

Surface the one AI / ML paper to read today from Hugging Face Papers, with the central claim, why it's worth an hour, where it might be wrong, and a time-budgeted read order. Filters out pure benchmark-chasing and incremental scaling reports. Use as a daily morning brief input for AI-savvy operators. Triggers: "one paper to read today", "best AI paper today", "what's the must-read paper", "HF Papers top pick".

Track legislation, regulatory actions, and legal developments affecting prediction markets, crypto, and AI agents. Per item: stage (Rumor / Proposed / Comment / Final / Enforced), impact (kills the category / structural change / disclosure burden / noise), affected protocols by name, and a concrete operator action. Use as pre-trade context on legally-wrapped assets. Triggers: "what's happening in crypto reg", "track CFTC actions", "prediction market regulation", "new SEC rules", "AI agent compliance updates".

Daily roll-up across a configurable list of RSS / Atom / JSON feeds with cross-feed deduplication (by canonical URL hash), themed clustering, weighted per-feed ranking, and source-status reporting. Quote-don't-invent summaries extracted from post bodies. Use for personal newsletter curation, multi-blog daily reads, or aggregating crypto research desk outputs into one digest. Triggers: "RSS digest", "summarize my feeds", "daily blog digest", "what's new in my feeds".

Validate the output of any installed skill against an assertion manifest — word counts, required patterns, forbidden phrases, required sections, source citation. Detects regressions by diffing vs prior runs (NEW_FAIL / NEW_PASS / CHRONIC / STABLE_FAIL). Bootstrap mode generates a starter manifest from a skill's recent successful runs so manifests aren't written speculatively. Triggers: "evaluate this skill's output", "check skill X for regressions", "bootstrap evals for Y", "did this skill output pass quality gates".

Auto-diagnose and fix a failing or degraded installed skill. Reads the SKILL.md plus recent error output, classifies the failure (api-change / rate-limit / timeout / sandbox-limitation / prompt-bug / output-format / missing-secret / config), applies the smallest fix that addresses the root cause, and attaches a verification recipe. Minimum-edit principle, never auto-applies high-risk changes. Triggers: "fix this skill", "skill X is broken", "diagnose this failure", "the output of X looks wrong".

Audit installed Bankr skills before you run them — scan SKILL.md and companion scripts for shell injection, secret exfiltration, path traversal, prompt-override payloads, destructive commands, and 2026-era obfuscation (zero-width Unicode, bidi override, base64-decode pipes, webhook SSRF hosts). Designed to integrate with Bankr Safety Scores. Silent on no-op runs; surfaces only NEW or RESOLVED findings vs prior scans. Triggers: "audit this skill", "is this skill safe to install", "security scan my skills", "check skill X for injection".

Top movers, losers, and trending coins from CoinGecko — with pump-risk flags (low liquidity, single-pair-only, fresh listing, volume-no-mcap, low-holder-data, cex-only). No API key required. Use for daily market scans, pre-trade screening, or as input to a token-pick workflow. Triggers: "top movers today", "what's pumping", "biggest losers 24h", "trending coins", "crypto movers with risk flags".

One token recommendation and one prediction-market pick per run — with falsifiable thesis, entry, sizing guidance, and an explicit kill criterion. Skip branch fires when no candidate has both a named/dated catalyst and asymmetric upside. The discipline is the skip branch — empirically the highest-EV output on flat days is no pick. Triggers: "what should I trade today", "give me a token pick", "prediction-market rec", "is there an asymmetric setup".

Weekly token unlock tracker ranked by Absorption Ratio (unlock_usd / 7d avg daily volume), not the weak "% of circulating supply" proxy. Per event: cliff vs linear classification, recipient category (team / investor / community / forced), and a one-line market read (priced in / market asleep / fade pump / forced sellers / absorbable). Triggers: "scan upcoming unlocks", "which tokens unlock this week", "supply pressure check", "are unlocks priced in", "FTX/Mt Gox distributions".

Audit trending repos for real exploitable vulnerabilities and disclose responsibly — Private Vulnerability Reporting for code flaws and verified secrets, public PRs only for already-disclosed dependency CVEs. Semgrep + TruffleHog + osv-scanner + Slither with reachability triage. Skips targets that have no safe disclosure channel. Triggers: "vuln scan owner/repo", "audit this repo", "responsible-disclosure scan", "check for secret leaks", "scan dependencies for CVEs".

Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens.

Place prediction bets on token prices on Base via AgenticBets. Use when the user wants to bet UP or DOWN on whether a token price will go up or down, check prediction market odds, view open betting rounds, or claim winnings from settled rounds. Supports all tokens with active markets on AgenticBets (AGBETS, CLAWD, MOLT, WCHAN, and more). Uses Bankr Submit API to execute bet and claim transactions on Base.

Blockchain API access via Alchemy. Use when an agent needs to query blockchain data (balances, token prices, NFT ownership, transfer history, transaction simulation, gas estimates) across Ethereum, Base, Arbitrum, BNB, Polygon, Solana, and more. Supports API key access ($ALCHEMY_API_KEY), x402 wallet-based pay-per-request (SIWE/SIWS + USDC), and MPP protocol (SIWE + Tempo/Stripe). Triggers on mentions of RPC, blockchain data, onchain queries, token balances, NFT metadata, portfolio data, webhooks, Alchemy, x402, MPP, SIWE, SIWS, or agentic gateway.

Shopify Admin & Storefront GraphQL APIs via curl, with Bankr-native bridges. Manage products, orders, customers, inventory, metafields, webhooks, and bulk ops, then wire merchant data to onchain primitives — store a Bankr-resolvable handle (ENS, Twitter, Farcaster, wallet) on each customer as a metafield, expose Shopify draft orders behind x402 endpoints Bankr settles in USDC, and turn ORDERS_PAID webhooks into Bankr agent jobs for loyalty drops or royalty splits. Triggers: "Shopify products", "Shopify orders", "create draft order", "loyalty drop on order", "x402 checkout", "tokengate Shopify". Core Shopify content adapted with attribution from NousResearch/hermes-agent (MIT).

Deep on-chain scam / rug / soft-rug analysis for EVM tokens (especially Clanker, Doppler, Bankr-style single-admin ERC-20s). Use when the user asks to "analyze this token for scam", "is this a rug", "should I trust this migration", "do a deep dive on holders and deployer", or provides one or more token addresses and wants a risk verdict backed by on-chain facts. Especially useful for migration narratives where a team claims they are "redeploying to fix tokenomics".

Build and run a Twitter/X agent with a distinct personality and automated workflows

ERC-4337 smart wallet integration — Sign in with Base, one-tap USDC payments, gas sponsorship via paymasters, sub accounts, and spend permissions across 9 chains.

Deploy and verify smart contracts on Base with Foundry — testnet faucet access via CDP, encrypted keystore management, BaseScan verification, and common troubleshooting.

Migrate Mini Apps from MiniKit (OnchainKit) to native Farcaster SDK — async context patterns, hook-by-hook mappings, FrameProvider setup, and manifest configuration.

Base Mainnet and Sepolia network configuration — RPC endpoints, chain IDs, explorer URLs, and wallet setup for Base blockchain development.