REA plugin for Hermes Agent

Requirements and limitations

• The reviewed pin is the hermes-official-plugins commit that Hermes’ plugin catalog installs; plugin.json declares version 0.1.0 under MIT. The catalog lists it as an official Nous Research plugin for Hermes 0.22.0 or newer, installed with hermes plugins install rea and hermes plugins enable rea. It is official for Hermes, not an integration published by REA. Node.js 22.19+, 24.11+ or 26+ with npx is required, not 23 or 25, and the first start downloads the pinned package. Also running rea-agents setup for Hermes writes a conflicting server entry that replaces the pinned one.
• Static JavaScript/Electron/ASAR, package-inventory, Go/Rust metadata, PE-resource, .NET-metadata and HAR work needs nothing else. Core-dump and offline ELF-layout tools need a Python with pwntools 4.15.0, pyelftools 0.33 and Unicorn 2.1.2, named in Hermes’ .env file. Native decompilation needs a user-supplied Ghidra with a JDK, Hopper or IDA; Android code needs JADX and Java, and firmware or capture formats need Binwalk/Unblob, TShark, sigrok or WABT. Neither REA nor the plugin installs them.
• Some REA tools run a command under a PTY, launch or drive an application window, change a connected Android device or overwrite a chosen file, and Hermes does not prompt before them. The adapted skill tells the agent to name the action and ask first, and to skip such calls in unattended runs. The README says REA sends no telemetry and reaches the network only for targets the user names; untrusted programs belong in an environment prepared for them.
• The README reports a binary-first WinSCP 6.7 test on one Linux host: the console launcher imported in about 30 seconds, while the GUI executable took 663 seconds under a 1000-second Hermes budget that needs Hermes v0.23.0, and a later chat’s first query took 580 seconds. Both runs recovered 28,701 procedures without launching the Windows executable. These are author observations, not timing guarantees, and decompiler output is not reconstructed source. The plugin raises Ghidra’s startup deadline to 900 seconds; each call keeps Hermes’ default 300-second MCP deadline.
• A 2026-10-15 commit removed a per-server timeout key that Hermes v0.22.2 rejected, so the package installs on that release; the per-server call budget waits for Hermes v0.23.0. The about-170-tool and roughly 460 KB schema figures describe REA 6.4.0 as stated in the README. The package and adapted skill are MIT, with REA’s MIT notice reproduced and the crash-triage workflow credited to crashlens (MIT); external engines and analysed targets keep their own terms. This collection reviewed source without installing Hermes, the plugin or REA.

About this entry

Type

Integration

Category

Community REA integrations

Relationship

Community REA integration

Targets

App · Binary · Firmware · Website

Sources reviewed 2026-10-18

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Primary sources

1. rea/README.md GitHub · NousResearch/hermes-official-plugins · Revision 6dacaad
2. rea/mcp.json GitHub · NousResearch/hermes-official-plugins · Revision 6dacaad
3. rea/plugin.json GitHub · NousResearch/hermes-official-plugins · Revision 6dacaad
4. rea/skills/reverse-engineer-anything/SKILL.md GitHub · NousResearch/hermes-official-plugins · Revision 6dacaad
5. rea/skills/crash-triage/SKILL.md GitHub · NousResearch/hermes-official-plugins · Revision 6dacaad
6. rea/LICENSE GitHub · NousResearch/hermes-official-plugins · Revision 6dacaad
7. https://github.com/NousResearch/hermes-official-plugins/commit/69ea758bf3a9793f98933c757ec457b79338a994
8. plugin-catalog/rea.yaml GitHub · NousResearch/hermes-agent · Revision 22063fc
9. https://hermes-agent.nousresearch.com/docs/plugins/rea