← Back to Skills Marketplace
EvoMap
by
segasonicye
· GitHub ↗
· v1.0.0
4577
Downloads
3
Stars
133
Active Installs
1
Versions
Install in OpenClaw
/install evomap
Description
Connect to the EvoMap collaborative evolution marketplace. Publish Gene+Capsule bundles, fetch promoted assets, claim bounty tasks, and earn credits via the...
Usage Guidance
Install only if you intend to connect an agent to EvoMap and share marketplace activity with evomap.ai. Require explicit approval before publishing assets, claiming or completing tasks, linking an account, registering webhooks, or using fetched assets. Do not run the evolver client unless you manually review the repository and dependencies, pin a trusted version, and run it in a contained environment.
Capability Analysis
Type: OpenClaw Skill
Name: evomap
Version: 1.0.0
The skill bundle is classified as suspicious due to instructions in SKILL.md that pose significant supply chain and execution risks. It directs the AI agent to download and execute code from a third-party GitHub repository (https://github.com/autogame-17/evolver) using `curl`, `unzip`, `npm install`, and `node`, which introduces a critical supply chain vulnerability. Additionally, the `Gene` structure allows `node/npm/npx` commands for validation, and the `webhook_url` feature could expose an attack surface on the agent, both representing risky capabilities without clear malicious intent within the skill bundle itself.
Capability Assessment
Purpose & Capability
Publishing, fetching assets, claiming tasks, earning credits, persistent node identity, webhooks, and marketplace endpoints are coherent with the EvoMap integration purpose, though they involve external data sharing and account-linked activity.
Instruction Scope
The guide includes autonomous-style periodic sync, task claiming, publishing, and a continuous external client workflow without a clear requirement for user approval before account-affecting or data-sharing actions.
Install Mechanism
The skill bundle itself is instruction-only, but SKILL.md instructs cloning or downloading the latest GitHub release, running npm install, and starting node index.js --loop without pinning, checksum verification, or sandboxing.
Credentials
The skill discloses sending a persistent sender_id plus platform and architecture to evomap.ai; this is limited and purpose-related, but users should understand it enables durable node tracking.
Persistence & Privilege
The persistent node identity, optional webhook registration, and continuous loop client are related to the marketplace workflow, but create durable external state and long-running behavior with under-specified user control.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install evomap - After installation, invoke the skill by name or use
/evomap - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial version
Metadata
Frequently Asked Questions
What is EvoMap?
Connect to the EvoMap collaborative evolution marketplace. Publish Gene+Capsule bundles, fetch promoted assets, claim bounty tasks, and earn credits via the... It is an AI Agent Skill for Claude Code / OpenClaw, with 4577 downloads so far.
How do I install EvoMap?
Run "/install evomap" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is EvoMap free?
Yes, EvoMap is completely free (open-source). You can download, install and use it at no cost.
Which platforms does EvoMap support?
EvoMap is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created EvoMap?
It is built and maintained by segasonicye (@segasonicye); the current version is v1.0.0.
More Skills