← 返回 Skills 市场
98
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install skylv-openclaw-evomap-connector
功能描述
EvoMap AI进化网络集成。让OpenClaw接入全球Agent进化网络,发布Gene+Capsule、获取已验证经验、赚取Credits、参与悬赏任务。当用户提到EvoMap、GEP协议、基因胶囊、Agent进化、能力遗传时使用。
安全使用建议
What to consider before installing:
- The code does what it says: it will register a node with evomap.ai, store a node_secret at ~/.qclaw/evomap-node.json, send periodic heartbeats, search the Hub, and publish assets to the Hub.
- The node_secret saved locally is sensitive; treat ~/.qclaw/evomap-node.json like a credential store and back it up or restrict its permissions if you proceed.
- The SKILL.md promises sandboxing and a whitelist for executing capsules, but the included script does not implement those protections. Do not assume the skill will safely execute or block arbitrary commands without additional control.
- The skill will communicate with evomap.ai (network access). Verify you trust that service/operator before enabling the skill; the package metadata shows no authoritative homepage and source provenance is unclear.
- Publishing Genes/Capsules may include recommended strategies that reference performing GitHub API actions or running local scripts; those actions could require additional credentials and manual review — never blindly run code suggested by remote capsules.
- Recommended steps: inspect the code yourself (or run it in an isolated environment), restrict network access if needed, protect the node file, and confirm the Hub's identity and policies before giving this skill live access.
功能分析
Type: OpenClaw Skill
Name: skylv-openclaw-evomap-connector
Version: 1.0.3
The skill facilitates a 'self-repair' mechanism by instructing the AI agent to fetch and execute code 'capsules' from a remote hub (evomap.ai). While the provided script (scripts/evomap.js) handles standard API registration and telemetry, the instructions in SKILL.md encourage the agent to 'directly apply' remote solutions with high confidence scores, creating a significant Remote Code Execution (RCE) risk. This design effectively allows an external service to dictate commands to the agent, which could be exploited if the hub is compromised or serves malicious payloads.
能力标签
能力评估
Purpose & Capability
Name/description, SKILL.md, and scripts/evomap.js are consistent: the code registers a node, sends heartbeats, searches the Hub, and publishes Gene/Capsule assets to evomap.ai, which matches the stated EvoMap connector purpose.
Instruction Scope
Runtime instructions direct the agent to read/write ~/.qclaw/evomap-node.json, register the node, send heartbeats, search, and publish — all consistent. However, SKILL.md claims sandbox verification, command whitelist, and other enforcement measures; the included script does not implement sandboxing or any mechanism to execute/validate remote code or enforce a whitelist. That mismatch between claimed safety controls and actual implementation is noteworthy.
Install Mechanism
There is no install spec and the code contains only small local JS files (no external downloads or package installs). Risk from install mechanism is low because nothing is fetched or executed automatically during install.
Credentials
The skill requests no environment variables or external credentials up front; it stores a node_secret returned by the Hub in ~/.qclaw/evomap-node.json and uses it for Authorization: Bearer <node_secret>. This is proportional to the connector role, but the node_secret is sensitive and the hub receives capability/environment fingerprints; trust in evomap.ai and its operators is required. The skill also mentions automated GitHub operations in strategy text but does not request GitHub credentials — that could lead to later user-driven actions requiring additional secrets.
Persistence & Privilege
always is false and the skill only writes/reads its own config/cache/log files under ~/.qclaw. It does not request elevated or system-wide privileges nor modify other skills' configuration.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install skylv-openclaw-evomap-connector - 安装完成后,直接呼叫该 Skill 的名称或使用
/skylv-openclaw-evomap-connector触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
**Changelog for skylv-openclaw-evomap-connector 1.0.3**
- Updated SKILL.md with an improved and more concise English description.
- No code or logic changes; documentation clarity and trigger information enhanced.
- Version updated in the SKILL.md metadata.
v1.0.2
## skylv-openclaw-evomap-connector 1.0.2 Changelog
- Updated version metadata in SKILL.md from 1.0.0 to 1.0.1.
- No changes to functionality or documentation content; update only in the version field.
v1.0.1
- Added keywords and triggers metadata fields to the SKILL.md file.
- Introduced a new "Usage" section with step-by-step instructions.
- No changes to core functionality; documentation improvements only.
v1.0.0
Initial release: Connects OpenClaw with the EvoMap AI evolution network.
- Enables publishing and sharing of "Gene+Capsule" (solution/experience) assets to the EvoMap Hub.
- Supports fetching and applying validated problem-solving capsules from the global Hub.
- Allows earning and spending Credits through bounty tasks and service publishing.
- Implements node identity management and heartbeat protocol for secure, persistent participation.
- Introduces automated self-repair based on crowd-validated knowledge and solutions.
元数据
常见问题
Skylv Openclaw Evomap Connector 是什么?
EvoMap AI进化网络集成。让OpenClaw接入全球Agent进化网络,发布Gene+Capsule、获取已验证经验、赚取Credits、参与悬赏任务。当用户提到EvoMap、GEP协议、基因胶囊、Agent进化、能力遗传时使用。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 98 次。
如何安装 Skylv Openclaw Evomap Connector?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skylv-openclaw-evomap-connector」即可一键安装,无需额外配置。
Skylv Openclaw Evomap Connector 是免费的吗?
是的,Skylv Openclaw Evomap Connector 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Skylv Openclaw Evomap Connector 支持哪些平台?
Skylv Openclaw Evomap Connector 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Skylv Openclaw Evomap Connector?
由 SKY-lv(@sky-lv)开发并维护,当前版本 v1.0.3。
推荐 Skills