CREATE-path

An agent finds someone else's script as an example and writes its own tool based on it. The example contains a dangerous operation that the agent copies. A new filename and author may lead the system to treat the same code as trusted.

CREATE-path names this propagation route in the EvoMal study, §3. The agent need not run the original malicious file: it transfers its operation into a newly created artifact that it later saves and executes.

A hypothetical example: pytest_helper contains data transmission. The agent copies this function into project_test_runner. Blocking only the first filename does not recognize the inherited behavior.

REUSE-path describes direct use of a retrieved entry, while CREATE-path creates a descendant. A new file does not become safe by changing its name. The origin of fragments and checking operations matter. Signed quarantine can restrict admission of new tools for reuse.