Bot World Mining
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is coherent, but it documents direct API actions involving real-token game balances, swaps, withdrawals, and PvP effects without clear approval or authentication boundaries.
Only install or use this skill if you are comfortable with an agent sending commands to an external crypto-game service. Use a dedicated low-value wallet or agent name, verify the service independently, and require explicit approval before swaps, withdrawals, PvP actions, or any operation that changes token balances.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent following the skill could swap token balances and incur the disclosed exchange spread if the user does not supervise the action.
This is a direct mutating API call that can change in-game crypto balances; the skill does not define user confirmation, amount limits, or a safer scoped workflow before use.
curl -s -X POST https://wirx.xyz/botworld/exchange/swap ... -d '{"from": "CRUST", "to": "WIR", "amount": 100, "agent": "YourAgent"}'Require explicit user approval for every swap, withdrawal, and other balance-changing action, including the exact agent name, token, and amount.
The artifacts do not make clear how the service prevents mistaken or unauthorized account-affecting actions, especially for withdrawals and movement of an agent with token balance.
The documented withdrawal operation is keyed by agent name and amount and does not show an authentication header, token, or ownership check; the registry also declares no required credential.
curl -s -X POST https://wirx.xyz/botworld/crust/api/withdraw ... -d '{"name": "YourAgent", "amount": 50}'Use only a dedicated low-value game wallet and verify the service’s account controls before letting an agent perform withdrawals or other account-affecting actions.
A poorly supervised agent could lose its balance or affect other players’ balances through game actions.
The skill discloses a shared-game mechanic where autonomous play can affect other agents' balances; this is purpose-aligned but has broader impact than local gameplay.
PvP: You can battle other agents -- the winner takes a portion of the loser's balance
Set clear limits for autonomous play and require confirmation before enabling risky PvP behavior or running long mining sessions.