Your Hermes agent's audit log is leaking customer emails. Here's a 100-line lib that fixes that.
A developer discovered that their Hermes agent's audit log was leaking sensitive customer information, including emails and credit card numbers. To address this issue, they created a lightweight library called agent-redact to scrub sensitive data before logging. The library offers features like hash mode for maintaining data integrity while redacting personal information.
- ▪The audit log of a Hermes agent was found to contain multiple customer emails and partial credit card numbers.
- ▪The developer created a 130-line library called agent-redact to clean sensitive information from logs.
- ▪Agent-redact includes features for redacting various types of personal information while allowing for data analysis.
Opening excerpt (first ~120 words) tap to expand
try { if(localStorage) { let currentUser = localStorage.getItem('current_user'); if (currentUser) { currentUser = JSON.parse(currentUser); if (currentUser.id === 3915555) { document.getElementById('article-show-container').classList.add('current-user-is-article-author'); } } } } catch (e) { console.error(e); } Mukunda Rao Katta Posted on May 25 Your Hermes agent's audit log is leaking customer emails. Here's a 100-line lib that fixes that. #devchallenge #hermesagentchallenge #agents #security Hermes Agent Challenge Submission: Write About Hermes Agent This is a submission for the Hermes Agent Challenge. I built a Hermes agent last week that takes a customer support email, decides whether it needs a refund, and either issues one or escalates to a human. Standard stuff. The agent worked.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at DEV.to (Top).