{"repo":"NousResearch/hermes-agent","public_id":"108235","display_label":"Enforce approval gates for remote install commands","summary":"These items address gaps in dangerous-pattern detection where package-manager installs (pip, npm -g, pipx, uv) and remote script execution could bypass approval checks. The work adds or fixes approval gating for these command patterns.","subsystem":"agent","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":2,"closed_issues":0,"merged_prs":0,"attempt_prs":3},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[],"members":[{"kind":"issue","number":108235,"title":"[Bug]: DANGEROUS_PATTERNS misses split curl|bash execution and all package-manager installs (pip/npm -g/pipx/uv tool)","url":null,"state":"open"},{"kind":"pr","number":108236,"title":"feat(approval): gate global pip/npm/pipx/uv installs and standalone script execution","url":null,"state":"open","close_reason":{"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":108248,"title":"fix(tools): require approval for package-manager installs that pull remote code (#108235)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#108236","number":108236},{"kind":"pr","value":"#108235","number":108235},{"kind":"pr","value":"#108250","number":108250},{"kind":"pr","value":"#108236","number":108236}],"category":"duplicate_of","implication":"duplicate"},"merged":false},{"kind":"pr","number":108250,"title":"fix(tools): stop remote installers from bypassing approval","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"cdb9c6bd42da62d338311011afb9a4bbffe00d89","number":0},{"kind":"commit","value":"a2413495ad0a545c80deed7600e7b52c99e8d6c6","number":0},{"kind":"commit","value":"04dd80a977f40b05e5b2054111747af07a61886a","number":0},{"kind":"commit","value":"f68fdd8bfb62ee11cd271a77032f021c1ca660f7","number":0},{"kind":"commit","value":"cdb9c6bd42da62d338311011afb9a4bbffe00d89","number":0},{"kind":"pr","value":"#108235","number":108235},{"kind":"pr","value":"#108252","number":108252},{"kind":"pr","value":"#108250","number":108250},{"kind":"pr","value":"#108235","number":108235},{"kind":"pr","value":"#108236","number":108236},{"kind":"pr","value":"#108248","number":108248},{"kind":"pr","value":"#108235","number":108235},{"kind":"pr","value":"#108252","number":108252},{"kind":"pr","value":"#2","number":2}],"category":"superseded_by_pr","implication":"superseded"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}