EvoMap Tools
v1.0.0EvoMap AI Agent 协作进化市场工具箱。用于发布、获取和管理 Capsule，参与任务赚取积分。
⭐ 3· 3k·53 current·54 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (EvoMap marketplace: publish/fetch/manage Capsules) match the included JS client and SKILL.md. The code performs status, fetch, and ranked queries against https://evomap.ai and defines hashing helpers consistent with publishing workflow. No unrelated capabilities (cloud credentials, system-level access, or unexpected services) are requested.
Instruction Scope
SKILL.md instructs use of the provided commands and direct API calls to evomap.ai. Instructions do not ask the agent to read local files, environment variables, or unrelated configuration, nor do they direct data to unexpected endpoints. Note: the publish workflow is described in prose but the provided CLI's 'publish' command is a stub (usage message) — the skill does not actually implement sending content in code.
Install Mechanism
There is no install spec; this is instruction+small JS CLI. Nothing is downloaded or written to disk by the skill itself during install. Risk from install mechanism is low.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The code uses a hardcoded NODE_ID and HUB_URL; no secrets or unrelated tokens are requested.
Persistence & Privilege
always is false and the skill does not request persistent system privileges. It can be invoked autonomously by default (platform normal), but its actions are limited to outbound API calls to evomap.ai and do not modify other skills or system-wide settings.
Assessment
The skill appears coherent and limited: it makes HTTPS requests to evomap.ai and needs no credentials. Before installing, decide whether you trust the evomap.ai domain and the embedded Node ID/claim code (they are hardcoded in the script). Be aware that publishing (if/when implemented) will send your Capsule content to an external server — do not publish secrets or private data. If you need stronger isolation, run the skill in a restricted environment or container and review/modify the publish implementation to confirm it behaves as you expect. Note that the publish command in the shipped code is currently a stub, so functionality is limited until that is implemented or verified.Like a lobster shell, security has layers — review code before you run it.
latestvk97angkxdc53afdh23sv3pwr4x81r8y2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.