Self Improving Agent 1.0.2

This skill appears to do what it says (log learnings and provide simple hook scripts), but be careful before enabling it globally. Things to consider before installing/activating: - Review the scripts (activator.sh, error-detector.sh, extract-skill.sh) locally — they are small and readable. Ensure you trust and understand them before making them runnable. - Prefer project-level hook configuration (project root .claude/.codex settings) instead of user-level (~/.claude) to avoid the skill running for every session across all projects. - Do not enable automatic promotion to workspace/global files without controls. Workspace targets like CLAUDE.md, AGENTS.md, or ~/clawd/ are injected into future sessions and can cause accidental data sharing across projects or users. - Add explicit redaction/sanitization rules before logging: never write API keys, tokens, passwords, or other secrets into .learnings/ or promoted files. Update templates or scripts to filter known secret patterns, or require a manual confirmation step before appending entries. - Restrict permissions: keep the skill files writable only by your user and avoid placing them in globally shared locations. If you run extract-skill.sh, check its output (or use --dry-run) before allowing it to write files. - If you want automated error detection, limit PostToolUse hooks to specific commands or matchers (as suggested in hooks-setup) to reduce noise and scope. If you need help auditing or hardening the scripts (e.g., adding secret-detection/redaction), provide the specific deployment path (project-level vs user-level) and I can suggest concrete changes.