rotifer-self-evolving-agent@2.4.15
VERIFIED· install onlyPublisher claims: "Rank an Agent's Rotifer Genes against the Arena and swap in stronger ones, and create and run the local Agents built from those Genes. Invoked explicitly via /evolve — scan local capabilities, compare Genes, inspect fitness scores, replace weak ones with user approval (each replacement can be rolled back), write an Agent definition into the project (/evolve create-agent), and execute a local Agent's Genes in the WASM sandbox (/evolve run-agent). Not for capabilities outside Rotifer." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 85/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
compatibility: Requires network access and Node.js. Launches `npx -y @rotifer/[email protected] --tools=evolve` for Arena rankings and Gene metadata.Fix: Pin versions and sources; vendor anything fetched at install time.npx -y @rotifer/[email protected] --tools=evolveFix: Pin versions and sources; vendor anything fetched at install time.… it invokes the `rotifer` CLI, and when that is not on `PATH` it falls back to `npx -y @rotifer/[email protected]`. That fallback lives in the server rather than here…Fix: Pin versions and sources; vendor anything fetched at install time./evolve discover --domain code.formatFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.…for it, on the Agent you name. Execution goes through the `rotifer` CLI (or an `npx -y @rotifer/[email protected]` fallback) and stays inside the WASM sandbox. That f…Fix: Pin versions and sources; vendor anything fetched at install time.… ## Security & Transparency ### Runtime dependency This Skill runs [`@rotifer/[email protected]`](https://www.npmjs.com/package/@rotifer/mcp-server/v/0.20.0) at runtime, launched as …Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.- **Source code**: [github.com/rotifer-protocol/rotifer-mcp-server](https://github.com/rotifer-protocol/rotifer-mcp-server)Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.…://www.npmjs.com/package/@rotifer/mcp-server/v/0.20.0) at runtime, launched as `npx -y @rotifer/[email protected]`. The package is **fetched from npm on first use** a…Fix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.