Cairn

Skill delete guards bypass via category path names

NousResearch/hermes-agent · cluster 120528 · skills

Data as of

4 open items. Fix attempted, not merged.

The short answer

1open issue
3open PRs
6items grouped
Known?
Yes. 6 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 2 PRs closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 3 PRs.

These issues and PRs concern a bug where the skill management delete operation fails to protect pinned or essential skills when they are referenced by their category path rather than their base name. The work involves hardening the name-matching logic used in delete guards.

Open issues1

  • Issue#120528[Bug]: skill_manage delete removes a pinned or essential skill when it is named by its category path

Open PRs3

  • PR#120529fix(skills): the delete pin/essential guard sees a skill named by its category path
  • PR#120971fix(skills): check base skill name against pinned and essential guards
  • PR#129651fix(skills): harden skill_manage name, pin and SKILL.md handling

2 PRs closed without merging

From the close comments: duplicate 1 · other 1

  • #120674 fix(skills): enforce delete guards for categorized paths · duplicate → #120529
  • #128730 fix(skills): harden skill_manage name, pin and SKILL.md handling · other → #129651
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.40: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
skills
Closed issues
0
Attempts
2 PRs closed without merging

For your agent

The same facts, typed.

cluster/120528.json
cluster/120528.md