Cairn

skills_guard false positives and verdict handling fixes

NousResearch/hermes-agent · cluster 13686 · skills

Data as of

3 open items. Fix merged in #97060. Check it covers your case.

The short answer

1open issue
2open PRs
8items grouped
Known?
Yes. 8 related items grouped here, 2 issues already closed.
Fix event
A fix was merged to main in PR #97060. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this partially resolved, deciding PR #97060. That is separate from the fix event.
Still open
1 issue and 2 PRs.

Multiple issues and fixes address the skills_guard tool producing false-positive CRITICAL/HIGH findings on benign skill content, and the 'ask' verdict being incorrectly treated as a hard block rather than a confirmation prompt. Fixes also cover honoring skill ignore files and improving actionability of returned findings.

Open issues1

  • Issue#37036skills_guard false-positive: mksglu/context-mode blocked by 12 false DANGEROUS findings

Open PRs2

  • PR#15437fix(tools): make skills_guard 'ask' verdict return actionable findings instead of generic block (#13686)
  • PR#37040fix(skills): cap documented-example findings one step instead of demoting all markdown (#37036)

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #97060 fix(skills-guard): benign skills no longer blocked by five false-positive scanner patterns (#60709, salvage #60750)

    merged to main

    files: tests/tools/test_skills_guard.py, tools/skills_guard.py

2 PRs closed without merging

From the close comments: done elsewhere 1 · merged via another change 1

  • #60750 fix(skills-guard): reduce false-positive CRITICAL/HIGH on benign skill patterns · merged via another change → #97060
  • #124428 fix(skills-guard): stop flagging template files, loopback/example hosts, and markdown table rows (#37036) · done elsewhere → 6e6d94b
Closed issues · 2
  • Closed#13686skills_guard: agent-created skills hard-blocked by false-positive regex patterns — 'ask' verdict treated as block
  • Closed#60709skills_guard: several rules produce false-positive CRITICAL/HIGH on benign skills (hard-blocks community installs)
How this cluster was grouped
  • Link evidence (partly structural links): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
  • Members outside that structural core may belong to a different underlying problem.
  • Pairwise link density 0.22: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
skills
Merged PRs
#97060
Closed issues
2
Attempts
2 PRs closed without merging
Fix link checked
28 Aug 2026

For your agent

The same facts, typed.

cluster/13686.json
cluster/13686.md