BLE → $ANIMA Minter

v1.0.0

Scan nearby BLE MAC addresses to mint unique soulbound $ANIMA tokens stored locally using hash and DAG-based proof-of-remnant logic.

1· 1.6k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name and SKILL.md claim '$ANIMA' minting and optional gossip-sync, but the code only performs local BLE scanning, SHA256 hashing with a static SALT, and writes a NetworkX gpickle file. There is no blockchain interaction, no network gossip implementation, and no credentials or endpoints related to minting — this is a capability mismatch (misleading claims).
Instruction Scope
Runtime instructions simply install requirements and run the script; the script scans nearby BLE devices and records hashed MACs. It does not read unrelated system files or environment variables. However it collects potentially sensitive device identifiers (even though hashed) and the SKILL.md mentions features (gossip-sync, minting) that are not implemented.
Install Mechanism
No install spec; instruction-only with a requirements.txt listing aioblescan and networkx. This is a low-risk install mechanism (pip packages) but requires caution because aioblescan interacts with system BLE hardware and may require elevated privileges to access adapters.
Credentials
The skill requests no environment variables or credentials, which matches its actual behavior (local-only). That said, the absence of any blockchain keys or endpoints underscores the mismatch between the 'minting' claim and what the code does.
!
Persistence & Privilege
The script writes a file anima_dag.gpickle to the current directory using NetworkX's gpickle (Python pickle-based serialization). Pickle files can execute code when unpickled — storing and later loading gpickle from untrusted locations is a security hazard. The skill does not request elevated privileges or persistently alter agent config, but the gpickle persistence is a notable risk.
What to consider before installing
Before installing or running this skill, consider: - Function vs claim: The code only scans BLE MAC addresses, hashes them with a fixed SALT, and stores hashes locally — it does NOT contact a blockchain, perform any real 'minting', or implement gossip sync despite those claims. If you expect true token minting, this skill is incomplete or misleading. - Privacy: It collects nearby device MACs (hashed). A static SALT means hashes are linkable across runs and could be used to track devices; if you need privacy, avoid a fixed salt or avoid collecting MACs at all. - Serialization risk: It writes anima_dag.gpickle (pickle-based). Unpickling gpickle files from untrusted sources can execute arbitrary code. Do not share or load that file without review; prefer safer formats (JSON) if you will reuse data. - System access: aioblescan requires access to BLE hardware and may need elevated permissions or specific platform setup. Run in an isolated environment (VM/container) and ensure you understand required privileges. - If you plan to extend this to real minting or gossip, require clear network endpoints, authentication keys, and audit of any code that transmits data. Right now there is no external transmission, so immediate exfiltration risk is low, but the mismatch between description and code is suspicious. Recommendations: run only in an isolated test environment, review or replace the fixed SALT, change serialization to a safe format, and do not rely on this code for any real blockchain minting without implementing and auditing secure network and credential handling.

Like a lobster shell, security has layers — review code before you run it.

animavk97402cq2xtchxv67nvvs9mjs17zydj6blevk97402cq2xtchxv67nvvs9mjs17zydj6blockchainvk97402cq2xtchxv67nvvs9mjs17zydj6dagvk97402cq2xtchxv67nvvs9mjs17zydj6flat-earthvk97402cq2xtchxv67nvvs9mjs17zydj6latestvk97402cq2xtchxv67nvvs9mjs17zydj6macidvk97402cq2xtchxv67nvvs9mjs17zydj6postpulsevk97402cq2xtchxv67nvvs9mjs17zydj6resurrectionvk97402cq2xtchxv67nvvs9mjs17zydj6soulproofvk97402cq2xtchxv67nvvs9mjs17zydj6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments