{"repo":"NousResearch/hermes-agent","public_id":"30103","display_label":"Blocking credential env vars from leaking to subprocesses","summary":"Multiple fixes and hardening efforts to prevent API keys and cloud provider credentials (AWS, Bedrock, Hermes) from being passed through to subprocesses via env_passthrough. Covers credential blocklist gaps across different auth types and config paths.","subsystem":"agent/secret_sources","counts":{"members":7,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":2,"merged_prs":1,"attempt_prs":4},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":34498},"resolution":{"state":"partially_resolved","by":"pr-34498"},"freshness":{"state":"verified","last_verified_at":"2026-05-29T08:48:09+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_PARTIAL","link_density":0.2552380952380952},"fix_edges":[{"issue_number":32314,"pr_number":34498,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true}],"members":[{"kind":"issue","number":30103,"title":"security: env_passthrough could allow malicious skills to leak API keys to subprocesses","url":null,"state":"closed"},{"kind":"issue","number":32314,"title":"[Bug]: auth_type=\"aws_sdk\" never feeds into subprocess credential blocklist; AWS env vars leak to terminal/execute_code","url":null,"state":"closed"},{"kind":"pr","number":32319,"title":"fix(security): include AWS credential vars in bedrock subprocess blocklist (#32314)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#34498","number":34498},{"kind":"pr","value":"#32314","number":32314}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":32374,"title":"fix(bedrock): register AWS credential env vars in subprocess credential blocklist","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#34498","number":34498},{"kind":"pr","value":"#32314","number":32314}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":32402,"title":"fix(security): strip AWS credential env vars from subprocesses for bedrock provider (#32314)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#34498","number":34498},{"kind":"pr","value":"#6032","number":6032}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":34387,"title":"fix(security): block AWS SDK creds from subprocess env","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"95b5b7240","number":0},{"kind":"commit","value":"6bebab476","number":0},{"kind":"pr","value":"#34498","number":34498},{"kind":"pr","value":"#32314","number":32314}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":34498,"title":"fix(security): strip Bedrock inference bearer token from subprocess env (#32314)","url":null,"state":"merged","close_reason":{"category":"merged","implication":"superseded"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["tests/tools/test_local_env_blocklist.py","tools/environments/local.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}