Evidence Gap Mapper
v1.0.0在报告、方案或演示稿中定位结论先行但证据不足的位置,并给出补证优先级。;use for evidence, gap-analysis, research workflows;do not use for 伪造数据支撑结论, 忽略高风险假设.
⭐ 0· 105·0 current·0 all-time
byvx:17605205782@52yuanchangxing
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the included assets: SKILL.md, resources/spec.json/template.md, and scripts/run.py implement local evidence-gap analysis, directory/csv/pattern audits, and structured brief generation. Declared requirement (python3) is proportional.
Instruction Scope
SKILL.md correctly instructs running the local script or falling back to templates. The script reads the input path (file or directory) and samples many text file types (.md, .py, .csv, .sh, etc.) to produce reports; this is expected for a local audit tool. Caution: if you pass broad system paths (e.g., /, ~, or your repo root) the script will read and summarize those files and may surface snippets that look like secrets (it attempts partial redaction for secret-like patterns). The skill does not instruct any network calls or remote posting.
Install Mechanism
No install spec is provided (instruction-only with an included helper script). That is low-risk: nothing is downloaded from external URLs and no packages are installed automatically. The only runtime requirement is a local python3 interpreter.
Credentials
No environment variables, credentials, or config paths are requested. The script operates on user-supplied input paths only, so requested privileges are minimal and appropriate.
Persistence & Privilege
The skill is not set to always:true and does not request persistent system or agent-level changes. It only writes output when you specify an --output path (or the agent chooses to), and SKILL.md emphasizes read-only / audit-first behavior.
Assessment
This skill appears to do exactly what it claims: local, template-driven evidence-gap analysis using a Python helper script. Before running it, review the included scripts (scripts/run.py) yourself. Only pass the files or directories you intend it to analyze — avoid pointing it at entire system roots, home directories, or other places containing secrets. The script will read text files you point it to and may surface snippets (it masks long secret-like tokens partially), so sanitize inputs if they contain sensitive data or run the tool inside an isolated workspace. If you need networked or automated publishing, perform change/write steps separately after manual review.Like a lobster shell, security has layers — review code before you run it.
latestvk97arxz3tftqa135gf24v23zcs8325qx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🕳️ Clawdis
OSmacOS · Linux · Windows
Binspython3
