fix: improve gateway secret capture guidance message

The old message referenced 'hermes setup' which doesn't handle
skill-specific env vars. Updated to direct users to load the skill
in the local CLI (which triggers the secure prompt) or add the key
to ~/.hermes/.env manually.

tests/agent/test_skill_commands.py

@@ -192,7 +192,7 @@ Generate some audio.
                 msg = build_skill_invocation_message("/test-skill", "do stuff")
 
         assert msg is not None
-        assert "hermes setup" in msg.lower()
+        assert "local cli" in msg.lower()
 
     def test_preserves_remaining_remote_setup_warning(self, tmp_path, monkeypatch):
         monkeypatch.setenv("TERMINAL_ENV", "ssh")

tests/gateway/test_platform_base.py

@@ -14,7 +14,7 @@ from gateway.platforms.base import (
 class TestSecretCaptureGuidance:
     def test_gateway_secret_capture_message_points_to_local_setup(self):
         message = GATEWAY_SECRET_CAPTURE_UNSUPPORTED_MESSAGE
-        assert "hermes setup" in message.lower()
+        assert "local cli" in message.lower()
         assert "~/.hermes/.env" in message
 
 

tests/tools/test_skills_tool.py

@@ -511,7 +511,7 @@ class TestSkillViewSecureSetupOnLoad:
         result = json.loads(raw)
         assert result["success"] is True
         assert called["value"] is False
-        assert "hermes setup" in result["gateway_setup_hint"].lower()
+        assert "local cli" in result["gateway_setup_hint"].lower()
         assert result["content"].startswith("---")
 
 
@@ -845,7 +845,7 @@ class TestSkillViewPrerequisites:
                 raw = skill_view("backend-unknown")
         result = json.loads(raw)
         assert result["success"] is True
-        assert "hermes setup" in result["gateway_setup_hint"].lower()
+        assert "local cli" in result["gateway_setup_hint"].lower()
         assert result["setup_needed"] is True
 
     @pytest.mark.parametrize(