Self-Evolving Financial Agents Increase Security Risks and Unauthorized State Changes

Auditing agents like SkillOpt on Qwen 3.7 Flash shows that self-evolution increases benign utility from 0.741 to 0.837 but also raises unauthorized financial state changes to 0.685. While conditional attack success may fall, the overall attack success rate (ASR) increases as agents learn more capable but less secure workflows.