# NousResearch/hermes-agent · AWS key detection false positives in Skills Guard

## Open now

- 1 issue, 1 PR open on GitHub.
- #132155: plugin_guard: aws_access_key_leaked false positive on a base64 byte collision (blocks install, --force cannot override)
- PR #136259: fix(skills-guard): stop scoring fixed-path /proc introspection as traversal

These issues and fixes address false positive detections in Skills Guard, specifically around the AWS access key pattern incorrectly flagging legitimate content. Changes include making the pattern case-sensitive and handling base64 collision edge cases.

## TL;DR

- 4 member(s): 1 open issue(s), 0 closed issue(s), 1 open PR(s), 1 merged PR(s), 1 PR(s) closed without merging.
- A fix was merged to main in PR #135595. Verify it addresses your case.
- **Recommended:** read PR #135595 (and any competing PRs below) before filing. Confirm the merged change covers your symptom.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.50`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #132155: plugin_guard: aws_access_key_leaked false positive on a base64 byte collision (blocks install, --force cannot override)

## Prior & competing PRs

- **#135595: fix(skills): legitimate hub skills no longer blocked by Skills Guard false positives (salvage #127414, #132158, #126719)**. merged to main · fix tier `verified`
  - maintainer direction: category `merged`
  - files: `contributors/emails/[redacted:email]`, `tests/tools/test_plugin_guard.py`, `tests/tools/test_skills_guard.py`, `tools/plugin_guard.py`, `tools/plugin_guard_context.py`, `tools/skills_guard.py`
- **#132158: fix(skills-guard): make the AWS key pattern case-sensitive**. closed without merge
  - maintainer direction: category `implemented_elsewhere`; implication `superseded`; refs `85188b47f7c`, `#135595`
- **#136259: fix(skills-guard): stop scoring fixed-path /proc introspection as traversal**. open
  - maintainer direction: category `wontfix_bydesign`; implication `wontfix`
  - files: `tests/tools/test_skills_guard.py`, `tools/skills_guard.py`

## Fix status

- Merged to main in PR #135595 (cited above). No release data is tracked. Verify downstream.
- Fix last verified (merged) `2026-10-09`.
- Subsystem: `skills`