self-improvement

Fail

Audited by Socket on Mar 8, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The self-improvement skill is coherently scoped to logging learnings and improvements locally, with optional promotion of learnings to project-wide memory. Its footprint—local file reads/writes, optional hooks, and documented installation paths from known sources—aligns with its stated purpose. While there are standard distribution avenues (GitHub, clawdHub), they do not present immediate malicious risk given the absence of credential handling, remote data flows, or unverifiable binaries. Overall, the risk is low to moderate (benign to suspicious in edge cases due to distribution mechanisms), with no evident credential exposure or external data exfiltration paths.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 8, 2026, 10:22 AM
Package URL
pkg:socket/skills-sh/ajdoyl2%2Fskill-self-improving-agent%2Fself-improvement%2F@6e4858081fdc7db0311ca2ad858e02312f23608c