{"repo":"NousResearch/hermes-agent","public_id":"132155","display_label":"AWS key detection false positives in Skills Guard","summary":"These issues and fixes address false positive detections in Skills Guard, specifically around the AWS access key pattern incorrectly flagging legitimate content. Changes include making the pattern case-sensitive and handling base64 collision edge cases.","subsystem":"skills","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":1,"closed_issues":0,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":135595,"merged_at":"2026-10-09T21:03:31+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-10-09T21:03:31+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[{"issue_number":118155,"pr_number":135595,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-10-09T21:03:31+00:00"},{"issue_number":132155,"pr_number":135595,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-10-09T21:03:31+00:00"}],"members":[{"kind":"issue","number":132155,"title":"plugin_guard: aws_access_key_leaked false positive on a base64 byte collision (blocks install, --force cannot override)","url":null,"state":"open"},{"kind":"pr","number":132158,"title":"fix(skills-guard): make the AWS key pattern case-sensitive","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"85188b47f7c","number":0},{"kind":"pr","value":"#135595","number":135595}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":135595,"title":"fix(skills): legitimate hub skills no longer blocked by Skills Guard false positives (salvage #127414, #132158, #126719)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["contributors/emails/[redacted:email]","tests/tools/test_plugin_guard.py","tests/tools/test_skills_guard.py","tools/plugin_guard.py","tools/plugin_guard_context.py","tools/skills_guard.py"]},{"kind":"pr","number":136259,"title":"fix(skills-guard): stop scoring fixed-path /proc introspection as traversal","url":null,"state":"open","close_reason":{"category":"wontfix_bydesign","implication":"wontfix"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}