Cairn

Untrusted-content wrapping for agent tool results

NousResearch/hermes-agent · cluster 57710 · agent

Data as of

3 open items. Fix attempted, not merged.

The short answer

2open issues
1open PR
6items grouped
Known?
Yes. 6 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 3 PRs closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
2 issues and 1 PR.

These issues and PRs concern agent tools—read_file, terminal, and session_search—returning externally-fetched or session-replayed content without applying untrusted-content wrapping or scanning. Multiple fix attempts address adding that wrapping to each affected tool.

Open issues2

  • Issue#57710read_file/terminal bypass the untrusted-content wrapper for externally-fetched files
  • Issue#57719session_search replays session content with no scan or untrusted-content wrapping

Open PRs1

  • PR#61001fix(security): frame session_search results as untrusted

3 PRs closed without merging

From the close comments: won't fix / by design 1 · other 2

  • #57712 fix(agent): wrap read_file/terminal results from externally-fetched paths as untrusted · won't fix / by design → #57710
  • #57721 fix(agent): wrap session_search results as untrusted content · other → #60917
  • #60917 fix(agent): wrap session_search results as untrusted content (salvage #57721) · other → #57721
How this cluster was grouped
  • Link evidence (partly structural links): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
  • Members outside that structural core may belong to a different underlying problem.
  • Pairwise link density 0.29: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
0
Attempts
3 PRs closed without merging

For your agent

The same facts, typed.

cluster/57710.json
cluster/57710.md