continuous-learning

SUSPICIOUS: The skill’s purpose and capabilities mostly align, but it introduces medium risk by automatically executing a local script on every session end and persisting instructions derived from untrusted session content. No explicit exfiltration, credential harvesting, or remote third-party routing is shown, so this is not confirmed malware; the main concern is autonomous persistence and prompt-injection propagation.