Auto Skill Evolver

This package is coherent with its goal (it reads execution traces, runs a local optimizer, and rewrites SKILL.md files). Important cautions before you install/use it: - Review optimize_skill.py (the truncated portion) to confirm how it invokes the OpenClaw sub-agent or any LLM/network calls — ensure no unexpected remote endpoints or credentials are used. - Run it with interactive approval (--interactive or --interactive-each-iteration) until you trust it; an approval token file containing the literal 'yes' will allow apply without further manual review. - The package modifies files on disk; ensure the skill files you pass are the intended targets and not symlinks. The code enforces symlink rejection and permission checks, but using it with privileged or system paths is unsafe. - Keep backups and/or run first in an isolated environment (container or a Git branch) so accidental or incorrect rewrites can be reverted. The tool creates .skill_versions backups, but you should have an additional source control snapshot. - The scripts execute subprocesses (user-supplied command and CLI calls). They attempt to block shell operators and some high-risk patterns (e.g., rm -rf, mkfs, curl/wget detection), but this is not a substitute for operational caution — only run commands you control. If you want higher assurance, provide the full (untruncated) optimize_skill.py and check for any network calls, credential reads, or subprocess invocations that reach external services; this would raise or lower confidence in the assessment.