evolution

SUSPICIOUS: The skill’s self-improvement purpose broadly matches local hooks and repo edits, but the trust model is elevated by a mutable raw GitHub installer and automatic shell hooks. Data flows stay same-org and no credential harvesting is evident, so this is not confirmed malware, but it is higher-risk than a normal documentation skill.