
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@cafitac/hermit-agent
Advanced tools
Spend premium agent tokens on judgment, not on routine execution.
Hermit is a small MCP coding executor for Claude Code and Codex. Your paid host agent plans, reviews, and makes the important calls; Hermit delegates bounded repository work—reading and editing files, running commands, and tests—to a local or lower-cost executor model.
It is a cost-optimization layer for agentic coding, not another chat UI and not a replacement for Claude Code or Codex.
Claude Code or Codex: plan, review, decide
│ delegate a bounded task
▼
Hermit: execute with a local or lower-cost model
│ return status and result
▼
Claude Code or Codex: verify and continue
Requires Node.js 20+ and Python 3.11+.
npm install -g @cafitac/hermit-agent
hermit install claude
npm install -g @cafitac/hermit-agent
hermit install codex
hermit install registers both hosts. Each command creates the local Hermit
settings if needed, starts the local gateway when necessary, and registers this
stable stdio command with the selected host:
hermit mcp-server
Restart the selected host after installation. Check the result at any time:
hermit doctor
hermit install codex writes the shared Codex MCP configuration, so the same
registration is available to the Codex CLI, desktop app, and IDE extension
after they restart.
Download hermit-<version>.mcpb from the matching GitHub Release and either
double-click it or choose Settings → Extensions → Advanced settings → Install
Extension in Claude Desktop. The extension uses the MCPB UV runtime, so it
installs Hermit's matching PyPI dependency without requiring a global Python
installation. It creates ~/.hermit/settings.json on first launch. It supports
Claude Desktop on macOS and Windows; network access is required the first time
UV resolves the Hermit package. The installation screen optionally accepts an
executor model, OpenAI-compatible base URL, and API key; these values are held
by Claude Desktop and applied only to Hermit's MCP process, rather than written
to settings.json. Leave them blank to keep existing Hermit/Ollama settings.
Ask Claude Code or Codex to delegate a scoped repository task to Hermit. The MCP server exposes four task-lifecycle tools:
run_task(task, cwd, model?, max_turns?)check_task(task_id)reply_task(task_id, message)cancel_task(task_id)run_task starts a background task. Poll with check_task; if Hermit needs
input or a permission decision, reply through reply_task.
Hermit also supplies a small server instruction that recommends delegation for bounded implementation, debugging, test, and maintenance work. It is guidance, not a hidden autopilot: the host still owns the decision to delegate.
run_task defaults to strategy: "single": one low-cost executor, with no
quality trade-off from orchestration. For a complex refactor, migration, or
security-sensitive change, the host can use strategy: "auto". Hermit then
runs a read-only planner, one writing executor, and a read-only reviewer.
There are never parallel writing agents. If the reviewer does not return
VERDICT: PASS, Hermit returns needs_review instead of done; the host gets
the execution result and review findings together. Users can make auto their
local default in ~/.hermit/settings.json:
{
"orchestration": {
"mode": "auto",
"max_agents": 3,
"allow_parallel_writes": false
}
}
Settings live at ~/.hermit/settings.json. The default executor routing is:
{
"routing": {
"priority_models": [
{"model": "glm-5.1"},
{"model": "qwen3-coder:30b"}
]
}
}
Use Ollama for a local executor (no per-token API cost) or any provider that offers the OpenAI-compatible Chat Completions API with tool calling. Give a custom endpoint an explicit provider profile; model names never need to match a built-in prefix:
{
"providers": {
"budget-provider": {
"base_url": "https://llm.example.com/v1",
"api_key_env": "BUDGET_PROVIDER_API_KEY"
}
},
"routing": {
"priority_models": [
{"model": "coder-small", "provider": "budget-provider"},
{"model": "qwen3-coder:30b"}
]
}
}
Codex is a supported MCP host; it is not part of the default executor fallback chain.
Claude Code or Codex
│ MCP over stdio
▼
hermit mcp-server
│ REST + task status
▼
FastAPI gateway (:8765)
▼
AgentLoop → repository tools → local/flat-rate LLM
The gateway owns background execution, cancellation, permission waits, model routing, and task state. The MCP process stays small and transports only the four public task operations.
.venv/bin/python -m pytest tests/
Hermit is MIT licensed and currently in alpha.
FAQs
Cost-optimized MCP coding executor for Claude Code and Codex
The npm package @cafitac/hermit-agent receives a total of 20 weekly downloads. As such, @cafitac/hermit-agent popularity was classified as not popular.
We found that @cafitac/hermit-agent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.