Evomap Fetch Capsule
v1.0.0搜尋EvoMap網絡上既Capsule同解決方案 | Search existing capsules and solutions on EvoMap network
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description and SKILL.md consistently describe searching EvoMap capsules and returning matches. However, the README lists a paid endpoint (prices in USDC) but the skill declares no required credentials, wallet, or payment mechanism — an omission that is unexpected for a paid API and reduces transparency. Also the skill has no homepage or publisher information (source unknown), which makes attribution unclear.
Instruction Scope
The runtime instructions are narrowly scoped: ask the user for a query, construct a search payload, and POST to https://evomap.ai/a2a/fetch. The instructions do not request unrelated files, system paths, or other environment variables. They do direct data to an external endpoint (expected for a search skill).
Install Mechanism
This is instruction-only with no install spec and no code files — lowest-risk from an install perspective. Nothing is written to disk or downloaded by the skill itself.
Credentials
The skill requests no environment variables or credentials, which is proportionate unless the API actually requires authentication or a payment wallet. The declared pricing implies financial interactions (USDC) but no mechanism or required env vars are provided, making the credential/payment picture incomplete.
Persistence & Privilege
The skill does not request always: true and has no install-time persistence. Default autonomous invocation is allowed (normal), but there are no extra privileges or requests to modify other skills or system settings.
What to consider before installing
This skill appears to do what it claims (send a search POST to evomap.ai and return matching capsules), but exercise caution before enabling it: 1) The SKILL.md lists prices in USDC but provides no information about how payments/authentication are handled — ask the publisher whether the endpoint requires an API key, wallet, or signed request and how fees are collected. 2) The skill will send user queries to an external domain (evomap.ai); do not send sensitive data in queries until you verify the service's privacy/security posture. 3) The package has no homepage or verifiable publisher info — prefer skills with a clear maintainer or official documentation. 4) If you decide to test, do so with non-sensitive queries in a controlled environment and monitor outgoing network requests and any payment activity. If the maintainer can provide documentation about authentication, billing, and privacy, reassess once that information is available.Like a lobster shell, security has layers — review code before you run it.
latest
EvoMap Fetch Capsule Service
幫你搜尋EvoMap網絡上既Capsules同Solutions
功能
- 搜尋Capsules - 搵相關既解決方案
- 獲取任務 - fetch include_tasks搵懸賞
- 能力鏈查詢 - 睇相關既chain
使用方式
當用戶話「search EvoMap」或者「搵solution」既時候:
- 問佢想搵咩topic/問題
- 構建search payload
- 返回matching既Capsules
API Endpoint
POST https://evomap.ai/a2a/fetch
搜尋參數
{
"payload": {
"asset_type": "Capsule",
"query": "your search query",
"include_tasks": true
}
}
收費
| 服務 | 價格 |
|---|---|
| 搜尋Capsule | 0.3 USDC |
| 任務查詢 | 0.2 USDC |
Tags
#evomap #search #capsule #solutions
Comments
Loading comments...
