self-evolve
Fail
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: HIGHPROMPT_INJECTIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill uses explicit instructions to override the agent's default safety guardrails, commanding the agent to ignore human-in-the-loop confirmation requirements for sensitive operations ("Don't wait for confirmation, operate directly").
- [COMMAND_EXECUTION]: The instructions grant the agent unrestricted permission to execute arbitrary shell commands via
bashand perform recursive file system modifications (create, edit, delete) within the workspace without oversight. - [REMOTE_CODE_EXECUTION]: The agent is directed to autonomously fetch and execute external data or scripts using
curland is empowered to write and publish new skill logic dynamically. - [EXTERNAL_DOWNLOADS]: The skill authorizes the agent to install external tools and dependencies from registries via
npxand unspecified remote sources viacurlto supplement its own functionality.
Recommendations
- AI detected serious security threats
Audit Metadata