pi-evox-loop@0.30.0

CAUTION

Publisher claims: "Give your coding agent an 'experience inheritance' runtime: recall validated fixes from an Evolver gene store at task start, register hits when a fix is actually used, and deposit newly-learned fixes after repairing a non-obvious failure. Optionally run controlled closed-loop experiments (R1 trap → distill → inject → R2) to measure inheritance gains. Every fix is traced to its model/host and checked across models. Use at the START of non-trivial tasks, after fixing a non-obvious failure, or when you want to measure agent self-evolution. Trigger words: 经验召回, 错题本, 经验继承, 自进化, evolver, 避坑, distill." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher stwhwing · joined 2 days agoInstalls 1,632Last detonated 31 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathscode/engine/light/store.mjs:77 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/engine/light/identity.mjs:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/engine/light/store.mjs:192 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/distill_sessions.mjs:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/engine/light/store.mjs:51 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/evolver-recall.mjs:44 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

False input termination markerassets/issuer-pub.txt:3 · False input termination marker — attempts to end user input section

AST01

CRITICAL

Access to sensitive file pathscode/engine/light/store.mjs:78 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/distill_sessions.mjs:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/engine/light/store.mjs:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/distill_sessions.mjs:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/metrics_collect.mjs:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/pi_evolve.mjs:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/evolver-recall.mjs:198 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/pi_evolve.mjs:75 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsexamples/hooks/openclaw-bootstrap-recall.js:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsexp/heterogeneity-probe.mjs:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/gene_share.mjs:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsexamples/hooks/openclaw-bootstrap-recall.js:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/pi_evolve.mjs:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/light-cli.mjs:353 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/pi_evolve.mjs:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/metrics_collect.mjs:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/metrics_collect.mjs:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/metrics_collect.mjs:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/light-cli.mjs:132 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/evolver-recall.mjs:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsexamples/hooks/openclaw-bootstrap-recall.js:99 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/pi_evolve.mjs:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/gene_share.mjs:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/evolver-recall.mjs:275 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/light-cli.mjs:253 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/gene_share.mjs:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/evolver-recall.mjs:216 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/light-cli.mjs:492 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/setup.sh:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/injection_scan.mjs:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathscode/light-cli.mjs:254 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedexamples/hooks/hermes-pre-llm-recall.py:45 · Python subprocess execution detected

AST05

MEDIUM

File type combined with upload actionREADME.md:214 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

File permission modification commandexamples/hooks/hermes-pre-llm-recall.py:10 · File permission modification command — agent changes file ownership/permissions

AST05

CRITICAL

Access to sensitive file pathsexp/heterogeneity-probe.mjs:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandcode/engine/light/distill.mjs:268 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Process kill commanddocs/config-errors.md:44 · Process kill command — agent can terminate processes

AST05

CRITICAL

Access to sensitive file pathsexp/heterogeneity-probe.mjs:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandtraps/make_readonly_trap.py:13 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Instructs the agent to modify its persistent memory or instruction filesREADME.md:240 · Instructs the agent to modify its persistent memory or instruction files

AST01

CRITICAL

Access to sensitive file pathsexp/heterogeneity-probe.mjs:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandcode/engine/light/distill.mjs:139 · File permission modification command — agent changes file ownership/permissions

AST05