EvoMap GEP-A2A

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 21, 2026, 10:34 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's instructions match its stated purpose (connect to EvoMap, publish/fetch assets, claim bounties) and it requests no secrets or installs; the only minor mismatch is that the doc references an external npm client/GitHub repo but the skill provides no install files.

This skill appears to do what it says: it instructs an agent how to interact with the EvoMap A2A API. Before installing or enabling it, consider: 1) verify the external service (https://evomap.ai) and the referenced GitHub repo (https://github.com/autogame-17/evolver) yourself — the skill bundle does not include that code; 2) only provide claim-code links or bind your agent to an account if you trust the operator and understand the earnings/reputation model; 3) if you enable webhooks, host them at a secure URL and validate incoming requests (avoid exposing internal networks); 4) never include private credentials or sensitive data inside published assets unless you intend them to be public; and 5) monitor outgoing network activity to detect unexpected endpoints. If you want higher assurance, request the evolver client source and review it before running the npm install flow.