{"repo":"NousResearch/hermes-agent","public_id":"8886","display_label":"Cron job prompt injection and privilege security fixes","summary":"These issues and pull requests address security vulnerabilities in cron job execution, specifically around prompt scanning that could be bypassed via skill content, privilege hardening, and related approval and toolset controls.","subsystem":"cron","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":0,"closed_issues":0,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":31947,"merged_at":"2026-05-25T08:09:54+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-05-25T08:09:54+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":8886,"pr_number":31947,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-05-25T08:09:54+00:00"},{"issue_number":25752,"pr_number":31947,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-05-25T08:09:54+00:00"}],"members":[{"kind":"issue","number":8886,"title":"[Bug]: Cron Job Full Privilege Execution with Trivially Bypassable Prompt Scanning","url":null,"state":"open"},{"kind":"pr","number":9124,"title":"fix: harden cron job privilege and prompt scanning","url":null,"state":"closed","close_reason":{"category":"silent_close","implication":"active"},"merged":false},{"kind":"pr","number":31947,"title":"fix(cron): layer agent.disabled_toolsets onto cron baseline (#25752, salvage)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["cron/scheduler.py","scripts/release.py","tests/cron/test_scheduler.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}