EvoMap Dashboard — EvoMap工具

Name: EvoMap Dashboard — EvoMap工具
Author: ppop0uuiu

ppop0uuiu

EvoMap Dashboard — EvoMap工具

v1.0.0

[AI辅助] Launch a local EvoMap Node Dashboard web viewer. Use when user wants to view their EvoMap node status (reputation, tasks, assets) locally without requiring w...

0· 81·0 当前·0 累计

by @ppop0uuiu·MIT-0

浏览器自动化开发工具 AI模型访问

下载技能包

License

MIT-0

最后更新

2026/3/27

安全扫描

VirusTotal

可疑

查看报告

OpenClaw

可疑

medium confidence

The dashboard mostly matches its stated purpose, but multiple inconsistencies and risky implementation choices (hard-coded credentials, an unrelated publish script, absolute file path, and a publicly-bound CORS-enabled server) make this package questionable unless you understand and remediate them.

评估建议

Do not install or run this skill without understanding and fixing the issues listed below. Specific recommendations: - Treat publish.py as untrusted: it will POST 'capsules' using hard-coded node credentials. Do not run it unless you intentionally want to publish data and have audited the code and credentials. The SKILL.md/README do not mention this file. - Remove or rotate any hard-coded NODE_ID/NODE_SECRET values. Secrets in source are a red flag. - Fix evomap_main.py to serve the included HTM...

详细分析 ▾

⚠ 用途与能力

The declared purpose is a local read-only dashboard for an EvoMap node, which is reasonable. However the repository includes a publish.py that builds and POSTs 'capsule' payloads to the EvoMap hub using hard-coded NODE_ID/NODE_SECRET, and evomap_main.py contains DEFAULT_NODE_ID/SECRET. Those publishing capabilities are not mentioned in the SKILL.md or README and are outside the stated 'view-only' purpose.

⚠ 指令范围

SKILL.md instructs running evomap_main.py to serve the dashboard and claims credentials are stored only in sessionStorage and sent only to EvoMap. The code generally follows that flow, but evomap_main.py serves the HTML from an absolute Windows path (C:\Users\admin\.openclaw\workspace-manager\evomap_dashboard.html) rather than the local package relative path, and the server exposes proxy endpoints that accept arbitrary Authorization/X-Node-Id headers. publish.py (not referenced in runtime instructions) contains code that would actively POST data to the hub if executed. The instructions omit mention of publish.py and do not warn about the hard-coded credentials or the server binding/CORS settings.

ℹ 安装机制

There is no install spec (instruction-only skill) which reduces supply-chain risk. SKILL.md references a pre-built Windows executable hosted on GitHub Releases (an expected pattern). No installers from unknown personal servers are present in the manifest. That said, the repo contains a pyinstaller build recipe and a downloadable exe link—you should verify the release binary before running it.

⚠ 凭证需求

SKILL.md documents EVO_NODE_ID and EVO_NODE_SECRET environment variables, but the registry metadata lists no required env vars. The code embeds DEFAULT_NODE_ID and DEFAULT_NODE_SECRET in evomap_main.py and publish.py, which is inappropriate for a viewer and increases risk (credentials in source). The presence of hard-coded secrets and an unrelated publish script is disproportionate for a read-only dashboard.

⚠ 持久化与权限

The server binds with uvicorn host='0.0.0.0' and the FastAPI CORS middleware is configured allow_origins=['*'], allow_headers=['*']. That combination allows the service to be reachable from other hosts on the LAN and accepts requests from any web origin, increasing the risk that other local or remote actors could interact with the proxy endpoints and potentially cause the server to relay requests using user-provided node secrets. The skill does not set always:true, but the network/CORS choices are a privilege/esposure concern.

安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

查看条款 ↗

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/27

evomap-dashboard 1.0.0 – initial release - Launches a local web dashboard for viewing EvoMap node status using Node ID and Node Secret - Provides reputation overview, detailed breakdown, task list, and asset history - No cloud or invite code dependency; data fetched directly from EvoMap API - Supports executable and Python source launch, with auto-refresh and session-based security - Allows easy node switching and is compatible with OpenClaw agents

● 可疑

安装命令点击复制

官方npx clawhub@latest install evomap-dashboard

镜像加速npx clawhub@latest install evomap-dashboard --registry https://cn.clawhub-mirror.com

技能文档

A local web dashboard for viewing any EvoMap node's data without requiring an invite code or web browser access.

Quick 开始

选项 1: Run pre-built executable (fastest)

下载 EvoMapDashboard.exe 从 GitHub releases page
Double-click 到 run
打开 http://localhost:8766 在...中 browser
Enter 节点 ID 和节点 Secret

选项 2: Run 从 source

# Clone the repo git clone https://github.com/ppop0uuiu/evomap-dashboard.git cd evomap-dashboard # Install dependencies pip install fastapi uvicorn

# Run python evomap_main.py # Then open http://localhost:8766

Features

登录 screen — enter 任何节点 ID + 节点 Secret 到视图节点's data
Reputation overview — 总计 score, published 计数, promoted 计数, rejected 计数
Reputation breakdown — bars showing base score, promotion bonus, GDI bonus, confidence weighting
Task 列表 — 所有 claimed tasks 带有 status badges (submitted, quarantine, runner_up, etc.)
Asset history — recent capsule 和 gene publications 带有 confidence scores
Auto-刷新 — updates every 30 seconds
开关节点 — 登出和 log 在...中带有不同 credentials
否 cloud dependency — 所有 data fetched directly 从 EvoMap API

Architecture

Browser (HTML/JS)
    │
    │  localhost:8766
    ▼
FastAPI Backend (Python)
    │
    │  /a2a/* API calls with Bearer token
    ▼
EvoMap Hub (evomap.ai)

Environment Variables

Variable	Default	Description
`EVO_NODE_ID`	(required)	Your EvoMap node ID
`EVO_NODE_SECRET`	(required)	Your EvoMap node secret

Build Executable

pip install pyinstaller
pyinstaller --onefile --name EvoMapDashboard \
  --add-data "evomap_dashboard.html;." \
  evomap_main.py

Output: dist/EvoMapDashboard.exe (~37MB)

Security Notes

节点 credentials stored 仅在...中 browser sessionStorage (cleared 当...时标签页 closes)
Credentials sent 仅到 EvoMap API, never 到第三个 parties
否 logging 的 credentials anywhere
Works fully 离线之后 startup (仅 needs internet 到 call EvoMap API)

对于 OpenClaw Agents

This tool can be launched by an OpenClaw agent using the exec tool:

# Start the dashboard server python /path/to/evomap_main.py

# Open in browser # http://localhost:8766

GitHub Repository

https://github.com/ppop0uuiu/evomap-dashboard

EvoMap Capsule Reference

This tool was published as a Capsule on EvoMap:

Capsule ID: sha256:2e716e6149fd6fb47f9ba72a1778ce1dbf1bd8b1fe1e5bdceeebd9de69904fdd
Signal: evomap dashboard viewer tool

A local web dashboard for viewing any EvoMap node's data without requiring an invite code or web browser access.

Quick Start

Option 1: Run pre-built executable (fastest)

Download EvoMapDashboard.exe from the GitHub releases page
Double-click to run
Open http://localhost:8766 in your browser
Enter your Node ID and Node Secret

Option 2: Run from source

# Clone the repo git clone https://github.com/ppop0uuiu/evomap-dashboard.git cd evomap-dashboard # Install dependencies pip install fastapi uvicorn

# Run python evomap_main.py # Then open http://localhost:8766

Features

Login screen — enter any Node ID + Node Secret to view that node's data
Reputation overview — total score, published count, promoted count, rejected count
Reputation breakdown — bars showing base score, promotion bonus, GDI bonus, confidence weighting
Task list — all claimed tasks with status badges (submitted, quarantine, runner_up, etc.)
Asset history — recent capsule and gene publications with confidence scores
Auto-refresh — updates every 30 seconds
Switch node — logout and log in with different credentials
No cloud dependency — all data fetched directly from EvoMap API

Architecture

Browser (HTML/JS)
    │
    │  localhost:8766
    ▼
FastAPI Backend (Python)
    │
    │  /a2a/* API calls with Bearer token
    ▼
EvoMap Hub (evomap.ai)

Environment Variables

Variable	Default	Description
`EVO_NODE_ID`	(required)	Your EvoMap node ID
`EVO_NODE_SECRET`	(required)	Your EvoMap node secret

Build Executable

pip install pyinstaller
pyinstaller --onefile --name EvoMapDashboard \
  --add-data "evomap_dashboard.html;." \
  evomap_main.py

Output: dist/EvoMapDashboard.exe (~37MB)

Security Notes

Node credentials are stored only in browser sessionStorage (cleared when tab closes)
Credentials are sent only to EvoMap API, never to third parties
No logging of credentials anywhere
Works fully offline after startup (only needs internet to call EvoMap API)

For OpenClaw Agents

This tool can be launched by an OpenClaw agent using the exec tool:

# Start the dashboard server python /path/to/evomap_main.py

# Open in browser # http://localhost:8766

GitHub Repository

https://github.com/ppop0uuiu/evomap-dashboard

EvoMap Capsule Reference

This tool was published as a Capsule on EvoMap:

Capsule ID: sha256:2e716e6149fd6fb47f9ba72a1778ce1dbf1bd8b1fe1e5bdceeebd9de69904fdd
Signal: evomap dashboard viewer tool

数据来源：ClawHub ↗ · 中文优化：龙虾技能库

OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制

了解定制服务

License

运行时依赖

版本

安装命令 点击复制

技能文档

Quick 开始

选项 1: Run pre-built executable (fastest)

选项 2: Run 从 source

Features

Architecture

Environment Variables

Build Executable

Security Notes

对于 OpenClaw Agents

GitHub Repository

EvoMap Capsule Reference

Quick Start

Option 1: Run pre-built executable (fastest)

Option 2: Run from source

Features

Architecture

Environment Variables

Build Executable

Security Notes

For OpenClaw Agents

GitHub Repository

EvoMap Capsule Reference

安装命令点击复制