← Back to Skills Marketplace
chatrichai

QMAP Client

by Karden · GitHub ↗ · v0.1.2 · MIT-0
linuxdarwin ⚠ suspicious
226
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install qmap-client
Description
CLI tool for the QuantMap distributed computing protocol. Manages node setup, task execution, and result submission on devnet.
Usage Guidance
This skill appears to be a normal CLI for a devnet protocol, but there are two things to check before installing or allowing agent-driven use: (1) verify the npm package (@alphify/qmap-client) is from a trusted source — inspect its npm page, tarball, or source repository and prefer installing manually in a sandbox; (2) be aware the CLI will create and use local identity files (~/.qmap/...), which likely contain private keys; back them up, restrict their filesystem permissions, and don't let an autonomous agent run wallet/join-network commands with them unless you trust the package. If you need higher assurance, request the skill provider's source repo or a reproducible build, run the CLI in a container or VM, and avoid global npm installs (use a virtual environment or npm prefix) or give the skill least privilege by running commands manually rather than allowing autonomous invocation.
Capability Analysis
Type: OpenClaw Skill Name: qmap-client Version: 0.1.2 The qmap-client skill is a standard CLI wrapper for the QuantMap distributed computing protocol. It facilitates node management and task execution via the @alphify/qmap-client npm package. The SKILL.md and metadata contain no evidence of malicious intent, data exfiltration, or prompt-injection attacks, focusing instead on legitimate protocol operations and local identity management.
Capability Assessment
Purpose & Capability
The declared purpose (CLI for a devnet distributed-compute protocol) matches the required binaries (node, npm) and the SKILL.md's install of @alphify/qmap-client. However the registry metadata claims no required config paths or env vars while the SKILL.md references ~/.qmap/profiles/devnet.env and local identity files — a metadata/instruction mismatch.
Instruction Scope
Instructions explicitly tell an agent/user to install the qmap CLI globally and run wallet/node management and task-claiming commands. Those commands will read/write local identity files and contact a network (devnet). The instructions do not ask the agent to read unrelated system files, but they do rely on a local config path that the registry did not declare.
Install Mechanism
The SKILL.md calls for npm i -g @alphify/qmap-client (a public npm package). Installing a global npm package is a moderate-risk install mechanism because it downloads and executes third-party code and writes binaries to the system PATH. This is expected for a CLI but the registry-level install spec was absent/empty while the SKILL.md includes its own install instructions.
Credentials
No env vars or credentials are declared, yet the tool manages wallets/identities and references ~/.qmap/profiles/devnet.env and local identity files (likely containing private keys). The skill does not declare this sensitive config path in its registry metadata, so the agent/user could inadvertently expose or let the agent operate on secrets without clear notice.
Persistence & Privilege
always is false and the skill is not force-included; autonomous invocation is allowed (platform default). The skill does request installing a global binary (which persists on disk), but it doesn't claim elevated platform privileges or modify other skills' configs.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install qmap-client
  3. After installation, invoke the skill by name or use /qmap-client
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.2
Improved documentation clarity and install metadata.
v0.1.1
Improved metadata and install method. Switched to npm package install.
v0.1.0
Initial release: QuantMap Solana v2 worker/validator client with ed25519 auth, nonce replay protection, and signed package verification.
Metadata
Slug qmap-client
Version 0.1.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is QMAP Client?

CLI tool for the QuantMap distributed computing protocol. Manages node setup, task execution, and result submission on devnet. It is an AI Agent Skill for Claude Code / OpenClaw, with 226 downloads so far.

How do I install QMAP Client?

Run "/install qmap-client" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is QMAP Client free?

Yes, QMAP Client is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does QMAP Client support?

QMAP Client is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin).

Who created QMAP Client?

It is built and maintained by Karden (@chatrichai); the current version is v0.1.2.

💬 Comments