paranoia-ai-system-evolver
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-provided 'instruction sheets' and 'AI work orders' as input for system evolution (e.g., modifying prompts, memory, or RAG). This constitutes an indirect prompt injection surface. The risk is mitigated by the skill's own instructions to use structured 'Intent Work Orders' and strict 'Human Gate' protocols requiring manual approval for any persistent system changes.
- [COMMAND_EXECUTION]: The package includes a local Python validation script (
quick_validate.py) designed to verify the integrity of the skill's files. Analysis of the script confirms it uses standard libraries to perform read-only static checks and does not contain any network operations or dangerous execution patterns. - [EXTERNAL_DOWNLOADS]: The documentation includes references to well-known technology sites (e.g., Martin Fowler's blog) and academic DOI links for decision theory and information value research. These references are used purely for educational and theoretical grounding and do not involve runtime code downloads.
Audit Metadata