Active Self-Improvement

• Analyzed: Apr 2, 2026, 6:41 AM
• Findings: 1
• Version: 1.3.0
• Hash: eb6e196449c8f827385da7e46014b0d166645b28c8e7f9c810cb85de829fce00
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'active-self-improvement' skill implements a self-modifying logic loop that automatically rewrites the agent's core instructions (e.g., SOUL.md, AGENTS.md) and skill files based on logs and error patterns. While the stated intent is optimization and 'self-healing,' this capability introduces a high risk of indirect prompt injection, where malicious input captured in logs (.learnings/ERRORS.md) could be promoted into permanent behavioral rules. The automated application of 'low-risk' changes and scheduled execution via cron further increase the risk of unattended logic shifts.