cekura-self-improving-agent
Warn
Audited by Socket on Oct 23, 2026
1 alert found:
AnomalyAnomalyproviders/self-hosted/overview.md
LOWAnomalyLOW
providers/self-hosted/overview.md
This fragment is workflow documentation for prompt editing and agent validation, not apparent malware. It describes several high-impact operations, especially executing a user-configured redeploy shell command and applying database or source edits. The documented transcript-to-auto-apply-to-shell path is a meaningful command-injection risk if caller-authored content is not isolated and authorization is not enforced. No direct malicious payload or data-exfiltration behavior is visible in this part.
Confidence: 93%Severity: 68%
Audit Metadata