Hermes Agent v0.21.5 lets AI agents use passwords without seeing them

Hermes Agent v0.21.5 introduces an "agent-invisible vault": credentials from 1Password, Bitwarden or Hermes' own store are injected directly into web forms, bypassing the model. The agent only sees that a field was filled, and card entry requires human confirmation.

• Passwords are injected into forms without passing through the model
• After filling, the agent sees only the field and domain
• Card entry requires confirmation, address does not
• Auto-detects accounts from 1Password and Bitwarden