Self Improving Agent

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: mhbmissile-self-improving-agent Version: 1.0.0 The bundle provides a comprehensive framework for 'self-improvement' by instructing the agent to log errors, user corrections, and new insights into a `.learnings/` directory. It includes functional shell scripts (`activator.sh`, `error-detector.sh`, `extract-skill.sh`) and OpenClaw hooks (`handler.js`) that inject reminders into the agent's context to facilitate this feedback loop. While the skill encourages the agent to modify workspace files like `SOUL.md` and `AGENTS.md` to persist learnings, the logic is transparently aligned with its stated purpose and lacks any indicators of malicious intent, data exfiltration, or unauthorized execution.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken or sensitive learning could be reused in future sessions and change how the agent behaves.

Why it was flagged

The skill intentionally promotes learnings into files that future agents may treat as context or instructions. This is purpose-aligned, but persistent memory can preserve incorrect or sensitive content if not reviewed.

Skill content
Broadly applicable learning | Promote to `CLAUDE.md`, `AGENTS.md`, and/or `.github/copilot-instructions.md`
Recommendation

Review `.learnings/` and promoted files before relying on them; avoid storing secrets, private user data, or unverified instructions.

What this means

Information from one session could be read or shared with another session if these tools are used.

Why it was flagged

The skill documents cross-session transcript reading, messaging, and sub-agent spawning as ways to share learnings. The artifacts do not show automatic use, but users should understand the data boundary.

Skill content
sessions_history — Read another session's transcript ... sessions_send — Send a learning to another session ... sessions_spawn — Spawn a sub-agent for background work
Recommendation

Use cross-session tools only when needed, avoid sharing sensitive transcript content, and bound any spawned sub-agent task clearly.

What this means

If enabled, hook scripts will run automatically during agent sessions.

Why it was flagged

Optional hook setup runs local shell scripts on prompt submission or Bash tool completion. The provided scripts only emit reminders or scan tool output for error strings, but hooks execute with the agent user's local permissions.

Skill content
"command": "./skills/self-improvement/scripts/activator.sh" ... "command": "./skills/self-improvement/scripts/error-detector.sh"
Recommendation

Enable hooks only if you want automatic reminders, keep the scripts reviewed, and disable the hook configuration if it becomes intrusive.