Reddi Self Improving Agent

• Analyzed: May 11, 2026, 5:35 AM
• Findings: 1
• Version: 1.0.13
• Hash: 7a6e511e0c92a77f226e26c23307f393dec8ad22ee8c76417976098e276307ac
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements a 'self-improvement' mechanism that instructs the agent to modify its own core instruction files (e.g., SOUL.md, AGENTS.md, TOOLS.md) based on external inputs like command errors and user feedback. This creates a significant surface for indirect prompt injection, where malicious command output could be 'promoted' into the agent's permanent system context to alter future behavior. While the provided scripts (extract-skill.sh, error-detector.sh) and hooks are functionally benign and include basic path-traversal protections, the architectural design of allowing an AI to rewrite its own 'system prompts' is a high-risk vulnerability.