evolve

Warn

Audited by Socket on May 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is coherent with its stated purpose of autonomous repository improvement, but it is high-risk because it grants an AI agent broad autonomous execution over a repo, invokes other skills transitively, and can commit and push changes without per-action approval. I found no strong evidence of credential theft, malware, or deceptive exfiltration; the main issue is powerful autonomy and expansive write/exec scope.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
May 11, 2026, 04:47 AM
Package URL
pkg:socket/skills-sh/boshu2%2Fagentops%2Fevolve%2F@6fc704f3ac2e5d1a5fefbc2eae0c80fb13f500e6