byted-ark-evolve
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
subprocess.runfunction across several core scripts to manage its evolutionary lifecycle. Evidence includes: scripts/apply-proposal.pyexecutes Git commands (git init,git config,git add,git commit) to establish version control and provide rollback capabilities for workspace modifications.scripts/orchestrator.pyinvokes the platform's agent binary (openclaw agent --local) to process data worksets for reasoning and analysis.scripts/workspace-init.pyrunsopenclaw --versionto verify environment compatibility.- [INDIRECT_PROMPT_INJECTION]: The skill implements a data ingestion surface by scanning conversation history and recording user feedback, which could contain malicious instructions.
- Ingestion points:
scripts/scan-history.pyextracts messages from historical session logs, andscripts/signal-record.pystores raw user feedback in a local database. - Boundary markers: No specific delimiters or "ignore previous instructions" guards are implemented in the automated scanning logic.
- Capability inventory: The skill can modify core configuration files (
SOUL.md,AGENTS.md) and execute shell commands via Git and the platform agent. - Sanitization: The risk is mitigated by a mandatory human-in-the-loop requirement where all proposed changes must be explicitly reviewed and accepted by the user before any file-write or execution occurs.
Audit Metadata