seb/hermes-agent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: harden skill trust source matching (#31229)

Browse Source 
Co-authored-by: gaia <gaia@gaia.local>
This commit is contained in:
Jorge Fuenmayor
2026-05-25 01:51:15 -07:00
committed by GitHub
co-authored by gaia
parent 2d422720b5
commit 93660643a6
4 changed files with 78 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/tools/test_skills_guard.py
+10 -2
View File
@@ -46,15 +46,23 @@ from tools.skills_guard import (
class TestResolveTrustLevel:
def test_official_sources_resolve_to_builtin(self):
def test_official_source_provenance_resolves_to_builtin(self):
assert _resolve_trust_level("official") == "builtin"
assert _resolve_trust_level("official/email/agentmail") == "builtin"
def test_trusted_repos(self):
assert _resolve_trust_level("openai/skills") == "trusted"
assert _resolve_trust_level("anthropics/skills") == "trusted"
assert _resolve_trust_level("openai/skills/some-skill") == "trusted"
def test_trusted_repo_sibling_prefixes_are_not_trusted(self):
assert _resolve_trust_level("openai/skills-evil") == "community"
assert _resolve_trust_level("anthropics/skills-foo/frontend-design") == "community"
assert _resolve_trust_level("huggingface/skills-bar/some-skill") == "community"
def test_official_github_namespace_does_not_resolve_to_builtin(self):
assert _resolve_trust_level("official/attacker-skill") == "community"
assert _resolve_trust_level("official/agent/evil-skill") == "community"
def test_skills_sh_wrapped_trusted_repos(self):
assert _resolve_trust_level("skills-sh/openai/skills/skill-creator") == "trusted"
assert _resolve_trust_level("skills-sh/anthropics/skills/frontend-design") == "trusted"