{"repo":"NousResearch/hermes-agent","public_id":"63977","display_label":"Reducing false positives in exfil_curl/exfil_wget detection patterns","summary":"These items concern overly broad pattern matching in exfil_curl and exfil_wget context-scan rules that incorrectly flag legitimate API usage. The work involves narrowing regex scope and adding word boundaries to reduce false positives.","subsystem":"agent","counts":{"members":4,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":98322,"merged_at":"2026-08-30T03:39:32+00:00"},"resolution":{"state":"resolved","by":"pr-98322"},"freshness":{"state":"verified","last_verified_at":"2026-08-30T03:39:32+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[{"issue_number":63977,"pr_number":98322,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-08-30T03:39:32+00:00"}],"members":[{"kind":"issue","number":63977,"title":"exfil_curl context-scan pattern blocks legitimate API recipes in SOUL.md — whole identity file silently replaced, agent runs on stock persona","url":null,"state":"closed"},{"kind":"pr","number":63994,"title":"fix(tools): reduce false positives in exfil_curl/exfil_wget patterns","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#98322","number":98322}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":64053,"title":"fix(tools): narrow exfil_curl/exfil_wget scope and add \\b boundary","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#63994","number":63994},{"kind":"pr","value":"#63977","number":63977}],"category":"superseded_by_pr","implication":"superseded"},"merged":false,"is_fix_pr":true,"fix_tier":"suggested","fix_detail_withheld":true},{"kind":"pr","number":98322,"title":"fix(security): env vars with mid-name API/KEY/TOKEN no longer flag as exfiltration (salvage #63994)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["tests/tools/test_threat_patterns.py","tools/skills_guard.py","tools/threat_patterns.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}