continuous-learning

SUSPICIOUS: The skill’s purpose broadly matches its capabilities, and no explicit malicious install path or exfiltration endpoint is shown. However, it automatically feeds full session transcripts into an unseen shell script and persists derived instructions as new skills, creating moderate confidentiality, persistence, and prompt-injection risk that cannot be fully verified from the supplied text.