Secure Setup on Load
Skills can declare required environment variables without disappearing from discovery: When a missing value is encountered, Hermes asks for it securely only when the skill is actually loaded in the local CLI. You can skip setup and keep using the skill. Messaging surfaces never ask for secrets in chat - they tell you to use hermes setup or ~/.hermes/.env locally instead. Once set, declared env vars are automatically passed through to execute_code and terminal sandboxes - the skill's scripts can use $TENOR_API_KEY directly. For non-skill env vars, use the terminal.env_passthrough config option. See Environment Variable Passthrough for details.
From the official Hermes Agent documentation.
required_environment_variables:
- name: TENOR_API_KEY
prompt: Tenor API key
help: Get a key from https://developers.google.com/tenor
required_for: full functionality