Cairn
NousResearch/hermes-agent

AWS key detection false positives in Skills Guard

Cluster 132155 · skills. Data as of

2 open items. Fix merged in #135595 on 9 Oct 2026. Check it covers your case.

The short answer

1open issue
1open PR
4items grouped
Known?
Yes. 4 related items grouped here, 0 issues already closed.
Fix event
A fix was merged to main in PR #135595. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 1 PR.

These issues and fixes address false positive detections in Skills Guard, specifically around the AWS access key pattern incorrectly flagging legitimate content. Changes include making the pattern case-sensitive and handling base64 collision edge cases.

Open issues1

  • Issue#132155plugin_guard: aws_access_key_leaked false positive on a base64 byte collision (blocks install, --force cannot override)

Open PRs1

  • PR#136259fix(skills-guard): stop scoring fixed-path /proc introspection as traversal

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #135595 fix(skills): legitimate hub skills no longer blocked by Skills Guard false positives (salvage #127414, #132158, #126719)

    merged to main

    files: contributors/emails/[redacted:email], tests/tools/test_plugin_guard.py, tests/tools/test_skills_guard.py, tools/plugin_guard.py, tools/plugin_guard_context.py, tools/skills_guard.py

1 PR closed without merging

From the close comments: done elsewhere 1

  • #132158 fix(skills-guard): make the AWS key pattern case-sensitive · done elsewhere → 85188b4, #135595
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
skills
Merged PRs
#135595
Closed issues
0
Attempts
1 PR closed without merging
Fix link checked
9 Oct 2026

For your agent

The same facts, typed.

cluster/132155.json
cluster/132155.md