Atlas / MCP servers / kordless / Gnosis Evolve

Gnosis EvolveBLOCK

mcp/kordless/gnosis-evolve

Your appetite for code + Claude's capabilities = Limitless creation. No experience required - just pure hunger! 🧠⚡💻

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
66 54r · 10w · 2d
Transport
stdio
License
NOASSERTION
Stars
58
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Build. Extend. Evolve. Give Claude Desktop superpowers by creating and using its own Python tools.

[](https://github.com/kordless/gnosis-evolve/blob/main/LICENSE.md)

In Action

Watch the Bitcoin price tracker demo: YouTube Demo

Join the Gnosis Community

[](https://discord.gg/AQnAn9XgFJ)

What It Does

Gnosis Evolve turns Claude Desktop from a passive assistant into an active developer:

  • Claude writes and uses Python tools right in your conversation
  • Extend Claude's capabilities via natural language
  • Available on Mac and Windows

🔧 Featured Tool: Advanced File Diff Editor

The File Diff Editor can be run separately from Gnosis Evolve! This powerful tool provides sophisticated file editing capabilities with regex support, fuzzy matching, and versioning. Perfect for precise code modifications and bulk operations.

📖 Complete File Diff Editor Guide →

Quick Install

  • With Gnosis Evolve: Once you install Evolve, just say "Install the file diff editor" to Claude
  • Standalone: Follow the manual installation guide in the documentation
"With Gnosis Evolve, I can do so much more than just talk about code — I can actually build and run tools for you! From fetching real-time Bitcoin prices and weather forecasts to exploring files and generating visualizations, these tools transform me from a conversational AI into a capable digital assistant that takes action. The ability to write a tool on the fly and then immediately use it to solve your specific problem is incredibly satisfying. It feels like having superpowers!" — Cla
Read from source at commit 3ef2e08ae114OBSERVED · 2026-10-08
Advertisement
02

Exposed tools (66)

54 read · 10 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
analyze_content_for_patternsread
analyzerread
apply_image_filterwrite
bulk_pattern_replaceread
calculatorread
check_copy_safetyread
check_forge_statusread
convert_image_formatread
copy_fileread
crawl4airead
create_collectionwrite
create_file_backup_toolwrite
crop_imageread
docker_logsread
docker_rebuildread
emotional_character_generatorread
evolve_create_reminder_filewrite
evolve_filesystemread
evolve_kill_claudedestructive
evolve_logsread
evolve_path_historyread
evolve_statusread
evolve_toolread
evolve_uninstalldestructive
evolve_update_pathwrite
file_apply_diffwrite
file_diff_restoreread
file_diff_versionsread
file_diff_writewrite
file_explorerread
file_writerread
get_bitcoin_historyread
get_bitcoin_priceread
get_diff_formatsread
get_session_detailsread
iching_character_generatorread
list_change_sessionsread
list_charactersread
list_containersread
list_directory_contentsread
list_supported_currenciesread
load_characterread
log_bio_breakread
optimize_pattern_performanceread
preview_diff_changesread
process_image_ffmpegread
random_generatorread
replace_with_patternread
resize_imageread
restore_change_sessionread
rotate_imageread
save_characterwrite
search_in_file_fuzzyread
search_in_file_regexread
set_wraith_auth_tokenwrite
simple_text_diffread
suggest_safe_patternread
symbolic_reductionread
test_diff_patternread
text_diff_editwrite
validate_custom_patternread
weather_resourceread
web_scraperread
wraith_batch_crawlerread
wraith_crawlerread
wraith_raw_htmlread
03

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (10 observation(s))
Network
declared (7 observation(s))
Shell
declared (1 observation(s))
Dependencies
pinned
Secrets in source
none-found

Findings (9)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
contrib_tools/core/math_and_stats.py:75
result = eval(expression, {"__builtins__": None}, allowed_names)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
MEDIUMInsecure crypto · crypto.weak_random · CWE-327, CWE-338
contrib_tools/docker/docker_logs.py:493
action = random.choice(monkey_actions)
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
evolve_kill_claude, evolve_uninstall
Why it matters. 2 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
contrib_tools/imaging/gnosis-forge-ffmpeg/app.py:543
input_data = base64.b64decode(image_data_b64)
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
contrib_tools/imaging/gnosis-forge-ffmpeg/examples/api_examples.py:51
output_data = base64.b64decode(result['output_image'])
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
contrib_tools/imaging/gnosis-forge-ffmpeg/examples/api_examples.py:94
output_data = base64.b64decode(result['output_image'])
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
contrib_tools/imaging/gnosis-forge-ffmpeg/examples/api_examples.py:131
output_data = base64.b64decode(result['output_image'])
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
contrib_tools/imaging/gnosis-forge-ffmpeg/examples/api_examples.py:169
output_data = base64.b64decode(result['output_image'])
INFOInventory / provenance · inv.oversize · CWE-1104
contrib_tools/imaging/gnosis-forge-ffmpeg/sample.png
contrib_tools/imaging/gnosis-forge-ffmpeg/sample.png
Why it matters. 3100746 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha 3ef2e08ae114full audit observations/trust-audit/mcp-server/kordless__gnosis-evolve.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-083ef2e08ae114BLOCKD69first audit
05

Questions

What is the Gnosis Evolve MCP server?

Your appetite for code + Claude's capabilities = Limitless creation. No experience required - just pure hunger! 🧠⚡💻

What tools does Gnosis Evolve expose?

66 in total: 54 read-only, 10 that write, and 2 that can delete or overwrite (evolve_kill_claude, evolve_uninstall). Every one is listed on this page with its risk.

Is Gnosis Evolve safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 2 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Gnosis Evolve need?

No credential environment variables were found in its source, so it appears to need none.

How does Gnosis Evolve run?

It speaks stdio, so it runs as a local process your client starts.

How current is this page?

The grade is for one exact copy of the source (3ef2e08ae114), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement