{"repo":"NousResearch/hermes-agent","public_id":"14372","display_label":"Subprocess environment credential and proxy leakage concerns","summary":"These issues and patches address subprocesses inheriting sensitive environment variables—including API keys, OAuth tokens, and proxy settings—from the parent process. Proposed fixes include centralized sanitization helpers, blocklists, and namespace isolation to prevent unintended credential exposure.","subsystem":"agent","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":0,"closed_issues":0,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[],"members":[{"kind":"issue","number":14372,"title":"[Bug] Browser tool: subprocess inherits proxy env vars causing ERR_EMPTY_RESPONSE","url":null,"state":"open"},{"kind":"pr","number":14393,"title":"fix(browser): strip proxy env from agent-browser subprocess","url":null,"state":"closed","close_reason":{"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":15372,"title":"fix(tools): strip proxy env vars from browser subprocess to prevent ERR_EMPTY_RESPONSE (#14372)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#14393","number":14393},{"kind":"pr","value":"#14372","number":14372}],"category":"superseded_by_pr","implication":"superseded"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}