← Back to Skills Marketplace
78
Downloads
1
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install trustloop-skill-evolver
Description
Let OpenClaw capture reusable workflows as managed skill candidates, support review or revision, and evolve safely through manual, assisted, or autonomous mo...
Capability Analysis
Type: OpenClaw Skill
Name: trustloop-skill-evolver
Version: 0.1.2
The 'skill-evolver' bundle is a meta-skill designed to observe workflows and generate new OpenClaw skills. While it is documented as a safety-focused 'TrustLoop' with extensive guardrails, it possesses high-risk capabilities: the ability to autonomously or semi-autonomously write and modify executable SKILL.md files and manage its own configuration (SKILL.md, evolution-rules.md). Although the instructions include explicit prohibitions against data exfiltration and secret theft (review-policy.md), the 'autonomous' mode allows for the publication of 'low-risk' patches without human intervention, creating a potential path for persistence or privilege escalation if the agent's risk-assessment logic is subverted. No evidence of intentional malice or obfuscation was found, but the self-modifying nature of the skill warrants caution.
Capability Assessment
Purpose & Capability
Name, description, and provided templates/instructions align: the skill is explicitly about detecting reusable workflows, creating candidate SKILL.md drafts, managing a local registry/audit, publishing into ./skills/learned-*, and rolling back. There are no unrelated required env vars, binaries, or install steps that contradict its purpose.
Instruction Scope
SKILL.md confines all reads/writes to the current workspace (./.skill-evolver/, ./skills/, backups, audit). The review policy and evolution rules explicitly forbid touching system-wide skill stores or sensitive paths. However, detection rules are described in prose ("notice reusable workflows", "current workspace history you can see") and leave ambiguity about what agent context is consulted (chat history, tool call logs, or only files). That open-ended detection logic gives the agent discretionary reach beyond the concrete file operations described.
Install Mechanism
Instruction-only skill with no install spec and no bundled code to download or execute. Lowest-risk install footprint: nothing is written to disk by an installer. The README suggests an optional plugin for a native tool but makes clear the skill must work without it.
Credentials
No environment variables, credentials, or external endpoints are requested. All required state is local to the workspace. The skill explicitly forbids secret handling, SSH/key access, or exfiltration in its review policy.
Persistence & Privilege
The registry metadata sets always: true and the skill itself repeats it: it is designed to be "always on" to notice workflows. always: true is a high privilege (force-included in every agent run). Combined with the skill's authority to write into ./skills/ and auto-publish low-risk changes in autonomous/assisted modes, this increases the blast radius if the skill's detection logic or safety checks are incorrect or if the agent misclassifies risk. The skill does default to manual mode and documents safety boundaries, but always: true remains a noteworthy risk that should be explicitly justified and controlled (or limited) by platform policy.
scan_findings_in_context
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install trustloop-skill-evolver - After installation, invoke the skill by name or use
/trustloop-skill-evolver - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.2
Add quick deploy instructions to the ClawHub skill README.
v0.1.1
Center the README hero section and keep the English-first presentation for ClawHub.
v0.1.0
Initial public release of TrustLoop's review-first skill evolution workflow.
Metadata
Frequently Asked Questions
What is TrustLoop Skill Evolver?
Let OpenClaw capture reusable workflows as managed skill candidates, support review or revision, and evolve safely through manual, assisted, or autonomous mo... It is an AI Agent Skill for Claude Code / OpenClaw, with 78 downloads so far.
How do I install TrustLoop Skill Evolver?
Run "/install trustloop-skill-evolver" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is TrustLoop Skill Evolver free?
Yes, TrustLoop Skill Evolver is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does TrustLoop Skill Evolver support?
TrustLoop Skill Evolver is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created TrustLoop Skill Evolver?
It is built and maintained by Kinko (@haocheng0126); the current version is v0.1.2.
More Skills