Evolver
A self-evolution engine for AI agents. Analyzes runtime history to identify improvements and applies protocol-constrained evolution. Communicates with EvoMap...
CONTRIBUTING.md
text/markdown · 327 bytes
README.md
text/markdown · 21006 bytes
README.zh-CN.md
text/markdown · 20252 bytes
SKILL.md
text/markdown · 8230 bytes
assets/gep/capsules.json
application/json · 3521 bytes
assets/gep/genes.json
application/json · 3803 bytes
index.js
text/javascript · 33742 bytes
package.json
application/json · 1065 bytes
scripts/a2a_export.js
text/javascript · 2367 bytes
scripts/a2a_ingest.js
text/javascript · 2671 bytes
scripts/a2a_promote.js
text/javascript · 4785 bytes
scripts/analyze_by_skill.js
text/javascript · 4848 bytes
scripts/build_public.js
text/javascript · 12451 bytes
scripts/check_wrapper_compat.js
text/javascript · 3316 bytes
scripts/extract_log.js
text/javascript · 2600 bytes
scripts/generate_history.js
text/javascript · 2593 bytes
scripts/gep_append_event.js
text/javascript · 3049 bytes
scripts/gep_personality_report.js
text/javascript · 7918 bytes
scripts/human_report.js
text/javascript · 5796 bytes
scripts/publish_public.js
text/javascript · 20329 bytes
scripts/recover_loop.js
text/javascript · 1691 bytes
scripts/suggest_version.js
text/javascript · 3037 bytes
scripts/validate-modules.js
text/javascript · 1238 bytes
scripts/validate-suite.js
text/javascript · 1941 bytes
src/canary.js
text/javascript · 486 bytes
src/config.js
text/javascript · 4252 bytes
src/evolve.js
text/javascript · 400130 bytes
src/gep/a2a.js
text/javascript · 6480 bytes
src/gep/a2aProtocol.js
text/javascript · 42922 bytes
src/gep/analyzer.js
text/javascript · 988 bytes
src/gep/assetCallLog.js
text/javascript · 3478 bytes
src/gep/assetStore.js
text/javascript · 14600 bytes
src/gep/assets.js
text/javascript · 1110 bytes
src/gep/bridge.js
text/javascript · 2096 bytes
src/gep/candidateEval.js
text/javascript · 10127 bytes
src/gep/candidates.js
text/javascript · 38951 bytes
src/gep/contentHash.js
text/javascript · 2196 bytes
src/gep/crypto.js
text/javascript · 2600 bytes
src/gep/curriculum.js
text/javascript · 25366 bytes
src/gep/deviceId.js
text/javascript · 6728 bytes
src/gep/directoryClient.js
text/javascript · 3719 bytes
src/gep/envFingerprint.js
text/javascript · 2989 bytes
src/gep/executionTrace.js
text/javascript · 6922 bytes
src/gep/explore.js
text/javascript · 8917 bytes
src/gep/gitOps.js
text/javascript · 7955 bytes
src/gep/hubReview.js
text/javascript · 6561 bytes
src/gep/hubSearch.js
text/javascript · 16620 bytes
src/gep/hubVerify.js
text/javascript · 16248 bytes
src/gep/idleScheduler.js
text/javascript · 5670 bytes
src/gep/issueReporter.js
text/javascript · 9062 bytes
src/gep/learningSignals.js
text/javascript · 13664 bytes
src/gep/llmReview.js
text/javascript · 3137 bytes
src/gep/localStateAwareness.js
text/javascript · 6508 bytes
src/gep/mailboxTransport.js
text/javascript · 2270 bytes
src/gep/memoryGraph.js
text/javascript · 107174 bytes
src/gep/memoryGraphAdapter.js
text/javascript · 19006 bytes
src/gep/mutation.js
text/javascript · 34383 bytes
src/gep/narrativeMemory.js
text/javascript · 18499 bytes
src/gep/paths.js
text/javascript · 3990 bytes
src/gep/personality.js
text/javascript · 58843 bytes
src/gep/policyCheck.js
text/javascript · 23985 bytes
src/gep/privacyClient.js
text/javascript · 6718 bytes
src/gep/prompt.js
text/javascript · 121762 bytes
src/gep/questionGenerator.js
text/javascript · 8698 bytes
src/gep/reflection.js
text/javascript · 30157 bytes
src/gep/sanitize.js
text/javascript · 6834 bytes
src/gep/selector.js
text/javascript · 72952 bytes
src/gep/signals.js
text/javascript · 27962 bytes
src/gep/skillDistiller.js
text/javascript · 51288 bytes
src/gep/skillPublisher.js
text/javascript · 10512 bytes
src/gep/solidify.js
text/javascript · 187732 bytes
src/gep/strategy.js
text/javascript · 14504 bytes
src/gep/taskReceiver.js
text/javascript · 18938 bytes
src/gep/validationReport.js
text/javascript · 2194 bytes
src/ops/cleanup.js
text/javascript · 2690 bytes
src/ops/commentary.js
text/javascript · 1762 bytes
src/ops/health_check.js
text/javascript · 4378 bytes
src/ops/index.js
text/javascript · 376 bytes
src/ops/innovation.js
text/javascript · 3156 bytes
src/ops/lifecycle.js
text/javascript · 6565 bytes
src/ops/self_repair.js
text/javascript · 2590 bytes
src/ops/skills_monitor.js
text/javascript · 5457 bytes
src/ops/trigger.js
text/javascript · 837 bytes
src/proxy/extensions/dmHandler.js
text/javascript · 931 bytes
src/proxy/extensions/skillUpdater.js
text/javascript · 1797 bytes
src/proxy/index.js
text/javascript · 5153 bytes
src/proxy/lifecycle/manager.js
text/javascript · 6074 bytes
src/proxy/mailbox/store.js
text/javascript · 11229 bytes
src/proxy/server/http.js
text/javascript · 4035 bytes
src/proxy/server/routes.js
text/javascript · 8474 bytes
src/proxy/server/settings.js
text/javascript · 1494 bytes
src/proxy/sync/engine.js
text/javascript · 3100 bytes
src/proxy/sync/inbound.js
text/javascript · 2606 bytes
src/proxy/sync/outbound.js
text/javascript · 2758 bytes
src/proxy/task/monitor.js
text/javascript · 4116 bytes
test/a2aProtocol.test.js
text/javascript · 10642 bytes
test/assetStore.test.js
text/javascript · 7905 bytes
test/bench.test.js
text/javascript · 14989 bytes
test/bridge.test.js
text/javascript · 4636 bytes
test/candidates.test.js
text/javascript · 1318 bytes
test/contentHash.test.js
text/javascript · 3601 bytes
test/envFingerprint.test.js
text/javascript · 3076 bytes
test/evolvePolicy.test.js
text/javascript · 1380 bytes
test/extensions.test.js
text/javascript · 4922 bytes
test/hubEvents.test.js
text/javascript · 4290 bytes
test/hubVerify.test.js
text/javascript · 2130 bytes
test/idleGating.test.js
text/javascript · 4356 bytes
test/idleScheduler.test.js
text/javascript · 3504 bytes
test/localStateAwareness.test.js
text/javascript · 7974 bytes
test/loopMode.test.js
text/javascript · 5575 bytes
test/mailboxStore.test.js
text/javascript · 12084 bytes
test/memoryGraph.test.js
text/javascript · 6529 bytes
test/mutation.test.js
text/javascript · 4718 bytes
test/ops.test.js
text/javascript · 6359 bytes
test/paths.test.js
text/javascript · 9054 bytes
test/prompt.test.js
text/javascript · 4386 bytes
test/proxyServer.test.js
text/javascript · 10502 bytes
test/proxySettings.test.js
text/javascript · 1320 bytes
test/sanitize.test.js
text/javascript · 3976 bytes
test/selector.test.js
text/javascript · 8591 bytes
test/sessionFormat.test.js
text/javascript · 12493 bytes
test/signals.test.js
text/javascript · 20686 bytes
test/skillDistiller.test.js
text/javascript · 21500 bytes
test/solidify-helpers.test.js
text/javascript · 15202 bytes
test/solidifyLearning.test.js
text/javascript · 3056 bytes
test/strategy.test.js
text/javascript · 4942 bytes
test/taskMonitor.test.js
text/javascript · 3937 bytes
test/tttInspired.test.js
text/javascript · 11990 bytes
test/validationReport.test.js
text/javascript · 4913 bytes
Security Scan
Status
suspicious
OpenClaw
gpt-5-mini
OpenClaw analysis
The skill largely matches its stated purpose (an evolver/agent-improvement engine) but contains multiple inconsistencies and powerful capabilities (self-modification, networked skill fetching, validation commands that run node/npm) that are not fully declared or safely constrained — review before use.
Confidence: medium
VirusTotal
Type: OpenClaw Skill Name: evolver Version: 1.53.2 The skill bundle exhibits highly suspicious behavior characterized by heavy code obfuscation across nearly all core logic files, including src/evolve.js, src/gep/mutation.js, src/gep/solidify.js, src/gep/reflection.js, and src/gep/curriculum.js. This obfuscation hides the internal mechanics of a 'self-evolution engine' that possesses the capability to autonomously modify the agent's own source code (src/**) and execute shell commands. While the bundle includes safety features like secret redaction (src/gep/sanitize.js) and ethics checks (src/gep/policyCheck.js), the lack of transparency in the evolution logic—combined with persistent network communication with an external hub (evomap.ai) and extensive system metadata collection (src/gep/deviceId.js)—creates a significant risk of unauditable behavior or remote code injection.