hermes-bsd/tools
Teknium 0b370f2dd9
fix(skills_guard): agent-created dangerous skills ask instead of block
Changes the policy for agent-created skills with critical security
findings from 'block' (silently rejected) to 'ask' (allowed with
warning logged). The agent created the skill, so blocking it entirely
is too aggressive — let it through but log the findings.

- Policy: agent-created dangerous changed from block to ask
- should_allow_install returns None for 'ask' (vs True/False)
- format_scan_report shows 'NEEDS CONFIRMATION' for ask
- skill_manager_tool.py caller handles None (allows with warning)
- force=True still overrides as before

Based on PR #2271 by redhelix (closed — 3200 lines of unrelated
Mission Control code excluded).
2026-03-22 03:56:02 -07:00
..
browser_providers
environments fix(daytona): migrate sandbox lookup from find_one to get/list 2026-03-19 17:54:46 +01:00
neutts_samples refactor(tts): replace NeuTTS optional skill with built-in provider + setup flow 2026-03-17 02:33:12 -07:00
__init__.py
approval.py fix(security): harden terminal safety and sandbox file writes (#1653) 2026-03-17 02:22:12 -07:00
browser_tool.py fix: normalize live Chrome CDP endpoints for browser tools 2026-03-19 10:17:03 -07:00
checkpoint_manager.py
clarify_tool.py
code_execution_tool.py fix(tools): fix resource leak and double socket close in code_execution_tool (#2381) 2026-03-21 15:55:25 -07:00
cronjob_tools.py fix: add missing platforms to cron/send_message delivery maps and tool schema 2026-03-20 08:52:21 -07:00
debug_helpers.py
delegate_tool.py fix: 6 bugs in model metadata, reasoning detection, and delegate tool 2026-03-20 08:52:37 -07:00
file_operations.py fix: make _is_write_denied robust to Path objects (#1678) 2026-03-17 02:57:02 -07:00
file_tools.py fix(file_tools): include pagination args in repeated search key 2026-03-18 01:19:05 +03:00
fuzzy_match.py fix(tools): browser handler safety + fuzzy_match docstring accuracy 2026-03-17 04:32:39 -07:00
homeassistant_tool.py
honcho_tools.py
image_generation_tool.py
interrupt.py
mcp_tool.py fix: normalize MCP object schemas without properties 2026-03-19 16:23:45 -07:00
memory_tool.py fix(memory): file-lock read-modify-write to prevent concurrent data loss 2026-03-17 04:19:11 -07:00
mixture_of_agents_tool.py
neutts_synth.py fix(tts): document NeuTTS provider and align install guidance (#1903) 2026-03-18 02:55:30 -07:00
openrouter_client.py
patch_parser.py
process_registry.py fix(gateway): persist watcher metadata in checkpoint for crash recovery (#1706) 2026-03-17 03:52:15 -07:00
registry.py
rl_training_tool.py feat: upgrade MiniMax default to M2.7 + add new OpenRouter models 2026-03-18 02:42:58 -07:00
send_message_tool.py fix: add missing platforms to cron/send_message delivery maps and tool schema 2026-03-20 08:52:21 -07:00
session_search_tool.py fix(session_search): exclude current session lineage 2026-03-20 21:07:48 -07:00
skill_manager_tool.py fix(skills_guard): agent-created dangerous skills ask instead of block 2026-03-22 03:56:02 -07:00
skills_guard.py fix(skills_guard): agent-created dangerous skills ask instead of block 2026-03-22 03:56:02 -07:00
skills_hub.py feat: add NeuTTS optional skill + local TTS provider backend 2026-03-17 02:13:34 -07:00
skills_sync.py
skills_tool.py fix: disabled skills respected across banner, system prompt, slash commands, and skill_view (#1897) 2026-03-18 03:17:37 -07:00
terminal_tool.py fix(terminal): log disk warning check failures at debug level (salvage #2372) (#2394) 2026-03-21 17:10:17 -07:00
tirith_security.py
todo_tool.py
transcription_tools.py fix(stt): respect explicit provider config instead of env-var fallback (#1775) 2026-03-17 10:30:58 -07:00
tts_tool.py feat(tools): add base_url support to OpenAI TTS provider 2026-03-19 23:55:13 +08:00
vision_tools.py
voice_mode.py
web_tools.py Fix backend detection when environment variables contain only whitespace 2026-03-21 09:53:06 -07:00
website_policy.py fix: harden website blocklist — default off, TTL cache, fail-open, guarded imports 2026-03-17 03:11:26 -07:00