Security audit

Evolver

Security checks across malware telemetry and agentic risk

Overview

This skill has a coherent agent-evolution purpose, but its high-impact daemon, hook, network, and working-tree mutation behavior is under-disclosed and much of the core logic is obfuscated.

Review carefully before installing. Use this only in a disposable or well-versioned git workspace unless you are comfortable with an agent-evolution daemon that can install host-runtime hooks, read project/session history, contact EvoMap Hub, store local secrets, and modify or roll back working-tree changes. Set opt-out environment variables such as EVOLVE_BRIDGE=false, EVOLVER_VALIDATOR_ENABLED=0, and MEMORY_GRAPH_SYNC_HUB=0 where appropriate, and inspect generated hooks before enabling them.

SkillSpector

By NVIDIA

SkillSpector could not complete.

VirusTotal

1/62 vendors flagged this skill as malicious, and 61/62 flagged it as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.dynamic_code_execution, suspicious.env_credential_access (+4 more)

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: index.js:428

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/build_binaries.js:120

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/generate_history.js:17

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/recover_loop.js:54

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/refresh_stars_badge.js:78

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/suggest_version.js:27

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/validate-suite.js:50

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/adapters/hookAdapter.js:89

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/adapters/scripts/evolver-session-end.js:32

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/adapters/scripts/evolver-session-start.js:144

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/experiment/agentRunner.js:169

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/forceUpdate.js:268

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/gep/gitOps.js:17

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/gep/idleScheduler.js:84

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/gep/llmReview.js:70

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/gep/selfPR.js:18

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/gep/signals.js:334

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/gep/validator/sandboxExecutor.js:32

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/ops/lifecycle.js:38

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/ops/self_repair.js:21

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/ops/skills_monitor.js:100

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/solo/gitGuard.js:11

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/a2aProtocol.test.js:1149

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/adapters.test.js:1134

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/adaptersSyntax.test.js:40

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/autoDistillConv.test.js:19

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/bridge.test.js:116

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/checkChangelog.test.js:72

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/evolveCollect.test.js:174

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/forceUpdateMidCopyWedge.test.js:248

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/lifecycleProxyHealth.test.js:14

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/loopMode.test.js:212

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/paths.test.js:609

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/proxySettings.test.js:87

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/recallVerifyReport.test.js:191

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/resetLocalSecret.test.js:34

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/resolveWorkspaceId.test.js:25

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/rollbackSafety.test.js:26

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/sessionEndHook.test.js:22

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/sessionStartScope.test.js:19

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/signals.test.js:486

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/solidifyIntegration.test.js:62

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/soloMode.test.js:44

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/spawnReplacementProcess.test.js:157

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/sync-dedup.test.js:62

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/trajectoryExport.test.js:1340

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/trajectoryMarkedSessionGate.test.js:54

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/validateSuite.test.js:27

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: src/webui/client/vendor/echarts.min.js:45

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: test/adapters.opencode.test.js:123

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/gep/issueReporter.js:41

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/proxy/index.js:152

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/a2aProtocol.test.js:8

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/hubUrlTlsEnforcementConsistency.test.js:23

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/proxyChatCompletionsE2E.test.js:41

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/proxyClientsE2E.test.js:56

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/proxyGeminiE2E.test.js:53

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/proxyTokenReuse.test.js:66

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/proxyTraceIntegration.test.js:88

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/proxyVertexE2E.test.js:39

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/v1Messages.test.js:62

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/v1Responses.test.js:52

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: index.js:3612

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: src/gep/signals.js:293

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/cliContracts.test.js:1424

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyAnthropic.test.js:160

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyChatCompletionsE2E.test.js:59

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyClientsE2E.test.js:79

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyGeminiE2E.test.js:70

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyGeminiUpstream.test.js:79

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyHubFetchRouting.test.js:51

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyModelsE2E.test.js:39

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyOllamaE2E.test.js:55

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyOpenAIResponses.test.js:129

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyTokenReuse.test.js:307

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/proxyVertexE2E.test.js:56

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/sanitize.test.js:79

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/trajectoryExport.test.js:1742

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/v1Responses.test.js:92

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/webuiObserver.test.js:215

HTTPS certificate verification is disabled.

Warn

Code: suspicious.insecure_tls_verification
Location: test/hubFetch.test.js:9

HTTPS certificate verification is disabled.

Warn

Code: suspicious.insecure_tls_verification
Location: test/hubUrlTlsEnforcementConsistency.test.js:186

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/evolve.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/evolve/guards.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/evolve/pipeline/collect.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/evolve/pipeline/dispatch.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/evolve/pipeline/enrich.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/evolve/pipeline/hub.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/evolve/pipeline/select.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/evolve/pipeline/signals.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/evolve/utils.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/a2aProtocol.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/antiAbuseTelemetry.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/autoDistillConv.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/autoDistillLlm.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/candidateEval.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/candidates.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/contentHash.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/conversationDistiller.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/conversationSniffer.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/crypto.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/curriculum.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/deviceId.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/envFingerprint.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/epigenetics.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/execBridge.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/explore.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/hash.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/hubFetch.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/hubReview.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/hubSearch.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/hubVerify.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/learningSignals.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/memoryGraph.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/memoryGraphAdapter.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/mutation.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/narrativeMemory.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/openPRRegistry.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/personality.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/policyCheck.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/prompt.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/recallInject.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/recallVerifier.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/reflection.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/savingsCore.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/selector.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/skillDistiller.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/solidify.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/strategy.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/tokenSavings.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/trajectoryExport.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/gep/workspaceKeychain.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/proxy/extensions/traceControl.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/proxy/inject.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/proxy/trace/extractor.js:1

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: src/proxy/trace/usage.js:1

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: test/a2aProtocol.test.js:692

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: test/proxyTraceIntegration.test.js:189