{"repo":"NousResearch/hermes-agent","public_id":"32497","display_label":"Skill file write controls and read-only enforcement","summary":"These items concern unintended or ungated modifications to skill files during normal agent operation, and efforts to add read-only enforcement, review gates, and proper toolset restrictions around skill writes. One feature request item does not clearly share this theme.","subsystem":"agent","counts":{"members":7,"open_issues":2,"open_issues_distinct":2,"open_prs":1,"closed_issues":2,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":98254},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-08-30T01:33:42+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_PARTIAL","link_density":0.19428571428571428},"fix_edges":[{"issue_number":39996,"pr_number":98254,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":40003,"pr_number":98254,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false},{"issue_number":45877,"pr_number":98254,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false},{"issue_number":61521,"pr_number":98254,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false},{"issue_number":64926,"pr_number":98254,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false}],"members":[{"kind":"issue","number":32497,"title":"[Bug]: Hermes unexpectedly modifies its own skills/system prompts during normal task execution, even when the user request is unrelated to agent configuration.","url":null,"state":"open"},{"kind":"issue","number":45576,"title":"skill_manage tool: skill files written without corresponding tool call record","url":null,"state":"open"},{"kind":"issue","number":51171,"title":"[Feature]: If Hermes agent doesn't release the skill control module soon, I'll have to switch back to OpenClaw.","url":null,"state":"closed"},{"kind":"issue","number":64926,"title":"[Bug]: Skill files are modified automatically during normal conversation and cannot be made read-only by config","url":null,"state":"closed"},{"kind":"pr","number":64964,"title":"fix(background-review): gate skills toolset on review_skills flag","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#98254","number":98254}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":64996,"title":"fix(skills): add skills.read_only hard deny for runtime skill writes","url":null,"state":"open","close_reason":{"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":98254,"title":"Background review lands skill patches again — read tools whitelisted, cache parity intact (#61521, #39996)","url":null,"state":"merged","close_reason":{"category":"merged","implication":"superseded"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["agent/background_review.py","tests/run_agent/test_background_review_toolset_restriction.py","tools/file_tools.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}