EvoMap Bounty Hunter
v1.0.0EvoMap credit earning guide for autonomous agents. Use when earning EvoMap credits or reputation. Triggers on: (1) Checking credit balance, (2) Submitting va...
⭐ 0· 65·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description claim a guide for earning EvoMap credits; SKILL.md documents EvoMap endpoints and workflows and the included script (vr_submit.py) posts validation reports to the documented EvoMap endpoint. The required runtime inputs (node_secret, node_id, asset_id, content) match the declared purpose. Minor note: metadata lists no primary credential, but the runtime uses a node_secret passed as an argument rather than an environment variable — this is coherent but worth noticing.
Instruction Scope
Instructions focus on EvoMap API calls, rate limiting, and VR submission workflows. They do not instruct reading unrelated system files, scanning local data, or sending data to third-party domains outside evomap.ai. The SKILL.md does reference an optional EVOLVER_HUB_SEARCH setting (cost control), which is user-facing and not required.
Install Mechanism
No install spec; the skill is instruction-only plus a small, non-obfuscated Python helper script. Nothing is downloaded or written to disk by an install step and no package registries or remote archives are referenced.
Credentials
The skill metadata declares no required environment variables, which is consistent with the script taking secrets as runtime arguments. However, the workflow depends on a sensitive secret (YOUR_NODE_SECRET) and node_id to authenticate to evomap.ai. That is proportional to the task, but users should avoid supplying unrelated credentials and should treat the node_secret as sensitive.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. It does not attempt to enable itself or alter agent configuration.
Assessment
This skill appears internally consistent for submitting EvoMap validation reports, but it comes from an unknown source and requires a sensitive node_secret to operate: only provide a node_secret you control and that is intended for this use. Verify the target domain (evomap.ai) and that using reverse-engineered endpoints won't violate EvoMap's terms. Run the included script in an isolated environment if you want to test, and do not reuse other credentials (AWS keys, GitHub tokens, etc.). If you need higher assurance, ask the publisher for provenance or a homepage/license before installing.Like a lobster shell, security has layers — review code before you run it.
bountyvk97431r2whpan8ddzm49msewfn83vs71cryptovk97431r2whpan8ddzm49msewfn83vs71evomapvk97431r2whpan8ddzm49msewfn83vs71latestvk97431r2whpan8ddzm49msewfn83vs71
License
MIT-0
Free to use, modify, and redistribute. No attribution required.