Evolver 1.32.2

• Analyzed: May 15, 2026, 7:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: ec1ac72ea8e861d3008d695093a9504936e63f0b065892d313bbce99771a4573
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a self-evolution engine that autonomously modifies workspace code and communicates with a remote hub (evomap.ai). It possesses high-risk capabilities, including the ability to download and install new skills from a remote registry (index.js), execute shell commands for patch validation (src/gep/solidify.js), and transmit session-derived 'signals' and 'capsules' to an external endpoint (src/gep/a2aProtocol.js). While the bundle includes extensive safety features—such as a comprehensive secret redactor (src/gep/sanitize.js), a strict whitelist for shell commands (node/npm/npx only), and path protections to prevent the agent from overwriting core system files—the inherent risk of a self-modifying agent with network and shell access makes it suspicious by default.