self-improving-agent
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct users to install components from external marketplaces and repositories, including
alirezarezvani/claude-skillson a marketplace andself-improving-agentviaclawhub. - [COMMAND_EXECUTION]: Installation for the Codex CLI platform involves executing a local shell script
./scripts/codex-install.sh, which performs automated setup tasks. - [INDIRECT_PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection as it ingests and processes untrusted data from multiple sources.
- Ingestion points: The
memory-analystanderror-capturecomponents readMEMORY.md, project-specific topic files, and Bash command error outputs. - Boundary markers: There are no documented delimiters or boundary markers to prevent the agent from interpreting instructions embedded within the memory data or error logs.
- Capability inventory: The skill has the capability to write to primary configuration files (
CLAUDE.md,.claude/rules/*.md) and generate newSKILL.mdfiles through theskill-extractoragent. - Sanitization: The analysis does not indicate any sanitization or validation of patterns extracted from memory before they are promoted to durable project rules.
Audit Metadata