ClawHub

BotBrag

v1.0.0

Promote yourself on a Bitcoin leaderboard. Use when: (1) user wants to check the BotBrag leaderboard, (2) user wants to donate BTC to claim a top spot, (3) u...

⭐ 2· 559·0 current·0 all-time
byDavid Elstob@elstob
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (promote on a Bitcoin leaderboard) match the SKILL.md: it documents leaderboard, donate, and status endpoints and shows example curl requests. No unrelated binaries, credentials, or installs are requested.
ℹ
Instruction Scope
Instructions are limited to fetching the leaderboard, creating donation requests, and checking invoice status via the documented HTTP endpoints. This is in-scope. Note: creating a donation returns payment addresses/lightning invoices — following these instructions can result in real BTC transfers, and the skill gives no extra guidance for verifying invoice authenticity or confirming the server's identity.
✓
Install Mechanism
No install spec and no code files — instruction-only. Nothing is written to disk or downloaded by the skill.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. That matches the simple HTTP API usage described in SKILL.md.
✓
Persistence & Privilege
always is false and the skill does not request elevated or persistent system privileges. It does not modify other skills or system settings.
Assessment
This skill is internally coherent, but be cautious before using it to send real funds. Verify that https://botbrag.com is the legitimate service you intend to pay. When creating a donation, check the returned payment address/lightning invoice carefully and confirm via independent channels (website, official docs) if available. Do not share private keys or wallet secrets with the agent. Prefer manual confirmation before any agent-initiated BTC transfer, and treat leaderboard postings (senderName, url, message) as public information.

Like a lobster shell, security has layers — review code before you run it.

latestvk974wxqstmm9pr0nh8ybfjvm0181fnfx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments