Bug
In graphifyy==0.9.13, graphify hermes install modifies the repository's AGENTS.md, although the command help presents the operation as installing the Hermes skill. The project-instruction-file mutation is not declared before it happens.
Environment
- graphifyy:
0.9.13
- platform: macOS 26.5.2 (25F84)
- test location: isolated temporary HOME and temporary repository (not a live Hermes profile or checkout)
Steps to reproduce
- Create a temporary repository containing an existing
AGENTS.md.
- Run
graphify hermes install from that repository with an isolated HOME/HERMES_HOME.
- Compare
AGENTS.md before and after the command.
Actual behavior
AGENTS.md is modified as a side effect of a command described as a Hermes skill installer.
Expected behavior
Installing a skill should not modify a repository instruction file unless that side effect is clearly declared and explicitly opted into. Prefer either:
- install only the Hermes skill; or
- expose project-instruction-file modification as a separate, explicit command/flag and show the target file before writing.
Why this matters
AGENTS.md is a high-trust instruction surface for coding agents. Silent mutation can change agent behavior in a live checkout and makes an apparently scoped installer unsafe to run. This is a general trust-boundary issue, not a local Hermes configuration preference.
I verified the behavior only in an isolated temporary environment and did not run the installer against the live profile or checkout.
Bug
In
graphifyy==0.9.13,graphify hermes installmodifies the repository'sAGENTS.md, although the command help presents the operation as installing the Hermes skill. The project-instruction-file mutation is not declared before it happens.Environment
0.9.13Steps to reproduce
AGENTS.md.graphify hermes installfrom that repository with an isolated HOME/HERMES_HOME.AGENTS.mdbefore and after the command.Actual behavior
AGENTS.mdis modified as a side effect of a command described as a Hermes skill installer.Expected behavior
Installing a skill should not modify a repository instruction file unless that side effect is clearly declared and explicitly opted into. Prefer either:
Why this matters
AGENTS.mdis a high-trust instruction surface for coding agents. Silent mutation can change agent behavior in a live checkout and makes an apparently scoped installer unsafe to run. This is a general trust-boundary issue, not a local Hermes configuration preference.I verified the behavior only in an isolated temporary environment and did not run the installer against the live profile or checkout.