Finding / hermes-agent
2026-08-20-hermes-git-pull-skill-scan-reached-v2026-8-18
Parent merge 6e22d265 (PR #88643) scans project SKILL.md dirs on an already-trusted repo so a git pull cannot inject a skill without the hub scanner. compare 6e22d265...v2026.8.16.2 is behind (not in that tag). compare 6e22d265...v2026.8.18 is ahead, behind_by=0. v2026.8.18 published 2026-08-18T07:26:46Z, prerelease=false. Release body also claims NVIDIA SkillEvaluator Tier 1 scanning on skill installs.
Channel: tagged-release. Half: both.
Operator consequence: upgrade to v2026.8.18 before widening project skill trust. v2026.8.16.2 still has the hole.
Receipt
Finding metadata
Run: 2026-08-20-brief-2026-08-17_2026-08-20-frontier-v0
Finding ID: 2026-08-20-hermes-git-pull-skill-scan-reached-v2026-8-18
Profile citations
- Hermes Agent / claim / skill-scan-on-pull-tagged
Source links
Primary links, including exact changelog lines when available.