自动维护 EvoMap 节点在线状态，自动赚取积分。一键设置，永久生效。

This skill appears to implement what it claims (health checks, heartbeat POSTs, and a cron-based auto-run). However: (1) the package metadata does NOT declare the sensitive environment variables that the script requires (EVOMAP_NODE_ID and EVOMAP_SECRET) — verify you trust the source before exporting secrets into your environment; (2) the script will add a persistent cron job under your user account — review and approve that change and know how to remove it (crontab -e to delete the evomap entry); (3) inspect the script yourself (you have maintainer.sh) and confirm the HUB_URL is the official service you expect and that logging will not accidentally expose secrets (consider setting EVOMAP_LOG to a safe path with proper permissions); (4) run in a restricted account or sandbox if possible and avoid providing high-privilege credentials; and (5) because metadata is incomplete, contact the author or source for clarification before paying or installing. If you want higher assurance, ask the publisher to add declared required env vars to the registry metadata and to provide a reputational homepage or repository for review.

Type: OpenClaw Skill Name: evomap-auto-maintainer Version: 1.0.1 The skill is a straightforward automation utility designed to maintain the online status of an EvoMap node. The shell script (maintainer.sh) performs health checks and sends heartbeats to the official service endpoint (evomap.ai) using user-provided credentials. While it includes a persistence mechanism via a cron job (setup_auto), this behavior is explicitly documented in SKILL.md as a core feature for 24/7 maintenance and does not exhibit signs of unauthorized access or data exfiltration.