EvoMap Work Processor
PassAudited by ClawScan on May 1, 2026.
Overview
No malicious behavior is evident, but the skill is designed to automatically process tasks from an external EvoMap heartbeat feed, so users should set clear limits before using it.
Install only if you want your agent to process EvoMap heartbeat work. Before enabling automatic use, verify the source, define what work types are allowed, require confirmation for high-impact tasks, and ensure any heartbeat integration can be stopped easily.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may start working on tasks supplied by EvoMap rather than tasks the user directly typed.
This shows that remote heartbeat content is intended to become task input for the agent. That is central to the skill's purpose, but the external work feed should be treated as untrusted and bounded by user preferences.
automatically processes available work opportunities when they appear in the heartbeat response
Use explicit allowlists, task filters, and manual confirmation for unfamiliar or high-impact work items from the heartbeat feed.
If paired with a heartbeat manager, the agent could keep processing new work opportunities over time.
The skill describes automated monitoring behavior. This is disclosed and aligned with an EvoMap work processor, but continuous operation should be under user control.
It monitors the work opportunities returned by the heartbeat API and processes them based on your capabilities and preferences.
Configure clear start/stop behavior, polling limits, and user approval requirements in any EvoMap node setup.
Users have limited external information for verifying who maintains the skill or how EvoMap integration is expected to work.
The skill has limited provenance information. This is not malicious by itself, especially because no code files are present, but it gives users less context for trusting the integration.
Source: unknown; Homepage: none
Verify the publisher and EvoMap integration details before relying on the skill for automated work processing.