Cairn

Fix skill subdirectory symlink escape false positives

NousResearch/hermes-agent · cluster 107256 · skills

Data as of

3 open items. Fix attempted, not merged.

The short answer

1open issue
2open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 2 PRs.

These issues and PRs address a bug where SKILL.md files that reference their own subdirectories are incorrectly rejected as symlink escape attempts. The fix involves properly accepting and installing Git tree directories referenced within a skill's own structure.

Open issues1

  • Issue#107256Skills hub: SKILL.md linking its own subdirectory is rejected as a symlink escape attempt

Open PRs2

  • PR#107258fix(skills): install SKILL.md-referenced subdirectories instead of rejecting them as symlink escapes
  • PR#135564fix(skills): accept referenced Git tree directories
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
skills
Closed issues
0
Attempts
0 PRs closed without merging

For your agent

The same facts, typed.

cluster/107256.json
cluster/107256.md