{"repo":"NousResearch/hermes-agent","public_id":"78004","display_label":"Skills cache keyed by name causes wrong installs","summary":"A bug where the skills system resolves and caches by skill name rather than source identifier, which can silently install an incorrect same-named skill and overwrite local content. Related fixes address cache keying and preventing metadata/bundle mixing across sources.","subsystem":"skills","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":1,"closed_issues":0,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[],"members":[{"kind":"issue","number":78004,"title":"[Bug]: hermes skills install resolves/caches by skill name, not source identifier — silently installs wrong same-name skill, overwriting local content","url":null,"state":"open"},{"kind":"pr","number":78017,"title":"fix(skills): key security-scan cache by source identifier, not name (#78004)","url":null,"state":"open","close_reason":{"refs":[{"kind":"pr","value":"#78004","number":78004}],"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":88022,"title":"fix(skills): never join metadata and bundle across sources","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#88020","number":88020},{"kind":"pr","value":"#78004","number":78004},{"kind":"pr","value":"#78017","number":78017}],"category":"duplicate_of","implication":"duplicate"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}