toolkit-evolution
Warn
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: MEDIUMPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill includes instructions and specific bash commands to register a nightly cron job using a crontab manager. This ensures the evolution cycle runs autonomously every day at a scheduled time.
- [DYNAMIC_EXECUTION]: A central feature of the skill is the autonomous generation and implementation of new code, skills, agents, and hooks. It automates the process of creating feature branches, committing changes, and merging them into the main repository after internal validation gates, reducing human oversight in the code promotion process.
- [INDIRECT_PROMPT_INJECTION]: During the discovery phase, the skill dispatches a 'Community' agent to web-search for trends and requests on platforms like GitHub, Reddit, and X. This involves ingesting untrusted external data which is then used to propose and build new capabilities, creating a vector for indirect instructions to influence the toolkit's development.
- [COMMAND_EXECUTION]: The skill extensively uses the Bash tool to perform administrative and repository tasks, including querying local telemetry databases, mining git history, and performing GitHub CLI operations such as creating and merging pull requests.
Audit Metadata