Zhua Evolver

爪爪专属自我进化系统 —— 自动分析能力差距、搜索补强技能、执行进化循环、记录进化日志。Use when 爪爪需要自我进化、能力提升、技能补强、或达到更高智能水平。

Do not run this skill as-is if you expect it to auto-discover and install other skills — the manifest and SKILL.md promise network/search/install behavior but the actual package lacks the referenced search/install/log scripts. If you want to use it: (1) ask the author for the missing scripts (search_skills.py, install_skills.py, log_evolution.py) and for a clear description of any network endpoints and credentials those scripts require; (2) review any returned scripts before executing them (look for network calls, subprocess exec, downloads, and credential access); (3) run untrusted code in a sandboxed environment first; (4) if you need automatic installation of other skills, prefer an implementation that documents which registry/API it uses and why it needs any credentials. The current mismatch could be harmless placeholder content, but it could also hide later additions that perform network or credentialed actions—treat as incomplete and verify before enabling autonomous use.

Type: OpenClaw Skill Name: zhua-evolver Version: 1.0.0 The skill bundle implements a 'self-evolution system' that instructs the AI agent to automatically search for, install, and configure new skills (SKILL.md). This 'self-modification' pattern is high-risk as it encourages the agent to execute unverified code from external sources. Furthermore, several critical scripts referenced in the SKILL.md workflow, such as 'install_skills.py' and 'search_skills.py', are missing from the bundle, preventing a full security audit of the installation logic. While the provided scripts (e.g., analyze_gap.py, orchestrate_minions.py) appear to be harmless status checkers, the underlying instructions for autonomous skill acquisition represent a significant attack surface for prompt injection and remote code execution.