{"repo":"NousResearch/hermes-agent","public_id":"8820","display_label":"Webhook payload sanitization for LLM prompt injection","summary":"These items address a security concern where attacker-controlled webhook payload fields were being forwarded directly into LLM agent prompts without sanitization. The changes involve sanitizing webhook payload values and requiring explicit agent prompts to reduce prompt injection risk.","subsystem":"gateway","counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[],"members":[{"kind":"issue","number":8820,"title":"[Security]: webhook routes forward attacker-controlled payload fields directly into agent prompt","url":null,"state":"closed"},{"kind":"pr","number":26817,"title":"fix(webhook): require explicit agent prompts","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#8820","number":8820},{"kind":"pr","value":"#53562","number":53562}],"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":34128,"title":"fix(gateway): sanitize webhook payload values before embedding in LLM prompts","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#53562","number":53562}],"category":"uncategorized","implication":"needs_llm"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}