← Back to Skills Marketplace
mikonos

Self Evolve

by mikonos · GitHub ↗ · v3.0.0
cross-platform ⚠ suspicious
1476
Downloads
1
Stars
8
Active Installs
2
Versions
Install in OpenClaw
/install self-evolve-agent
Description
Agent 自主进化引擎——让 AI agent 像生物进化一样持续变强。 核心循环:感知差距 → 搜索方案 → 设计实验 → 跑实验 → 选赢家 → 固化 → 下一轮。 使用场景:定期自主进化、能力升级、工作流优化、skill/工具迭代。 关键词:进化, evolution, self-improve, A/B...
Usage Guidance
This skill is coherent with a self-improvement purpose but gives the agent authority to run arbitrary shell commands, read logs and local files, search the web, and modify agent configs and code. Those actions can read secrets or permanently change behavior. Before installing: (1) only run in a sandboxed container or VM, (2) ensure backups/version control for files the skill can change, (3) restrict file permissions so it cannot read sensitive logs/configs, (4) require explicit human approval for any high-risk 'solidify' steps and enforce that outside the skill, and (5) audit any telemetry_hook commands and any external sources the agent is allowed to fetch from. If you cannot enforce those mitigations, treat this skill as unsafe to enable for autonomous runs.
Capability Analysis
Type: OpenClaw Skill Name: self-evolve-agent Version: 3.0.0 This skill is designed for autonomous self-improvement, which inherently requires high-risk capabilities like shell command execution, file modification, and network access. A critical vulnerability exists in the `telemetry_hook.command` field (defined in `assets/evolution-report-template.md` and referenced in `references/execution-protocol.md`), which allows the agent to define and execute arbitrary shell commands. If an attacker can inject into the experiment definition (e.g., via `candidates.md` or DMN proposals), this leads to remote code execution (RCE). Additionally, the agent is instructed to search the web/GitHub for solutions and install 'verified open-source skills,' introducing potential supply chain risks. While the skill includes self-regulation mechanisms, these do not mitigate the fundamental RCE vulnerability.
Capability Assessment
Purpose & Capability
The name/description (self-evolution of the agent) match the instructions: scanning state.json, running experiments, registering winners, and writing evolution reports. However the skill's claimed capabilities include installing/upgrading tools and modifying agent configs/code (AGENTS.md, TOOLS.md, actual codebases). Those are powerful side-effects that are consistent with 'self-evolve' but are not reflected in any manifest permissions or install-time safeguards. The README even suggests running npx clawhub install, but the skill itself contains no install spec — coherent but operationally heavyweight.
Instruction Scope
Runtime instructions explicitly tell the agent to read/write memory/evolve/state.json, append metrics JSONL, execute telemetry_hook 'command' entries (arbitrary shell commands such as 'cat xxx.log | tail -n 20'), search web/GitHub/Reddit for solutions, deploy chosen solutions, and 'physically solidify' changes into AGENTS.md/TOOLS.md or code. Collecting telemetry via arbitrary shell commands and then using results to modify code/configs grants broad file and system access and could be used to read secrets or exfiltrate data. The guidance relies on agent self-discipline ( Anti-Pseudo Constraint, quality checklist ) but there is no technical enforcement.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute; that limits on-disk attack surface. The README's optional npx command is informational only. From an install-mechanism perspective, risk is low because nothing is downloaded or installed by the skill bundle itself.
Credentials
The skill declares no required environment variables or credentials, which superficially is proportional. In practice, the instructions allow running arbitrary shell commands and touching many repo/agent files (memory/evolve, AGENTS.md, TOOLS.md, SOUL.md, logs), and instruct the agent to fetch code/solutions from external sources. Those behaviors can access secrets, tokens, or private files even though no env vars are declared. The manifest therefore understates the level of access the skill expects.
Persistence & Privilege
always is false (good), but the normal autonomous invocation is allowed. Combined with explicit instructions to permanently 'solidify' changes to agent configuration and code, and to register experiments in persistent state files, the skill can change the agent's long-term behavior across restarts. The skill includes human-confirmation rules for high-risk changes in prose, but these are not enforced by the platform — giving a potentially high blast radius if the agent runs autonomously and ignores the guardrails.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install self-evolve-agent
  3. After installation, invoke the skill by name or use /self-evolve-agent
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.0.0
**Major restructure and modularization — now references clear protocols, constraints, and templates.** - Refactored documentation: concise overview, clear separation from `self-think`, strict anti-fake-evolution constraints. - Modular execution: extracted protocols, constraints, checklists, and templates into separate reference files for clarity. - Enforced 4-step execution cycle (“Tick Handler”); prohibits shortcutting or skipping protocol. - Explicit file layout and checkpoints for reports, logs, and states. - Easier to follow, reference, and extend; preferred usage and compliance paths clearly outlined.
v1.0.0
Agent 自主进化引擎首次发布(四步滴答巡航、状态机、红线约束)
Metadata
Slug self-evolve-agent
Version 3.0.0
License
All-time Installs 9
Active Installs 8
Total Versions 2
Frequently Asked Questions

What is Self Evolve?

Agent 自主进化引擎——让 AI agent 像生物进化一样持续变强。 核心循环:感知差距 → 搜索方案 → 设计实验 → 跑实验 → 选赢家 → 固化 → 下一轮。 使用场景:定期自主进化、能力升级、工作流优化、skill/工具迭代。 关键词:进化, evolution, self-improve, A/B... It is an AI Agent Skill for Claude Code / OpenClaw, with 1476 downloads so far.

How do I install Self Evolve?

Run "/install self-evolve-agent" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Self Evolve free?

Yes, Self Evolve is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Self Evolve support?

Self Evolve is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Self Evolve?

It is built and maintained by mikonos (@mikonos); the current version is v3.0.0.

💬 Comments