Self-Referential Self-Improvement
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is coherent with its stated self-improvement purpose and shows no clear credential theft, exfiltration, or hostile supply-chain behavior, but it grants unusually broad self-modification powers and can trigger automatically after failures. The main risk is autonomous rewriting of prompts/code, including its own system prompt, not malware or credential harvesting.
Confidence: 85%Severity: 58%
Audit Metadata