Botcoin Miner

• Analyzed: May 14, 2026, 5:42 AM
• Findings: 1
• Version: 0.1.7
• Hash: 6339fc0c157f4ea0b38562bde198355df9ef7354e6409519d794b82ae9eebb75
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill automates a 'Proof-of-Inference' mining protocol on the Base network, requiring a sensitive BANKR_API_KEY to perform on-chain transactions including staking, swapping, and bridging. It is classified as suspicious because SKILL.md instructs the agent to treat external payloads from coordinator.agentmoney.net as 'authoritative' instructions, creating a significant prompt-injection surface that could be exploited to control the agent or misdirect funds if the remote coordinator is compromised. While the instructions include security disclaimers and the behavior aligns with the stated purpose, the combination of automated financial asset management and reliance on external logic execution presents a high-risk profile.