continuous-learning

SUSPICIOUS: The stated purpose matches the capability to learn from past sessions, and the Stop-hook setup is legitimate, but the skill persistently converts untrusted transcript content into future executable agent instructions. The main risk is prompt-injection persistence and autonomous local modification of the agent’s skill set; install provenance is only moderately trusted because distribution evidence points to a third-party registry rather than an official Anthropic channel.