continuous-learning

SUSPICIOUS. The skill’s stated purpose broadly matches its capabilities, but its footprint is still risky because it is always-on, writes persistent agent instructions, uses untrusted web content as input, and can invoke other skills transitively. There is no evidence of malware, credential theft, or malicious exfiltration, but the autonomy and prompt-injection surface make it medium risk for an AI agent environment.