I'm using Hermes. The same applies to all agents, don't give it free reign over all your stuff. Run it within a sandbox.

https://github.com/nousresearch/hermes-agent

which one is recommended? (on machine - oss)

NemoClaw is an OpenClaw security wrapper, not a replacement

It's shit, but most people don't know better

Which "claw" so you recommended?

None of them, but prefer ones written with engineering rigor and security in mind. Having an unvetted plugin ecosystem with code that runs unsandboxed is laughably naive

The one attached to your arm.