evolve
Warn
Audited by Socket on May 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
This skill is coherent with its stated purpose of autonomous repository improvement, but it is high-risk because it grants an AI agent broad autonomous execution over a repo, invokes other skills transitively, and can commit and push changes without per-action approval. I found no strong evidence of credential theft, malware, or deceptive exfiltration; the main issue is powerful autonomy and expansive write/exec scope.
Confidence: 87%Severity: 78%
Audit Metadata