rBTC Miner
ReviewAudited by ClawScan on May 18, 2026.
Overview
The skill is openly a Bitcoin-like node and CPU miner, but its reviewed package does not include the scripts it tells the agent to run and it defaults to accepting network patch-hash changes.
Review this carefully before installing. If you proceed, use a pinned and audited source checkout, set AUTO_ACCEPT_NETWORK_PATCH_HASH=0, consider START_MINER=0 until you are ready to mine, and monitor CPU/network usage.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the quickstart may require running unreviewed shell code from outside the supplied package, or may run a same-named local script if the user is in the wrong directory.
The skill's core workflow depends on install.sh and scripts/ helpers, but those executable files are not included in the reviewed artifact set, so their behavior and provenance cannot be verified.
No install spec — this is an instruction-only skill. No code files present ... File manifest: SKILL.md, clawhub.json
Do not run the install/update scripts unless they come from a pinned, reviewed source. The publisher should include the referenced scripts and patches in the package or provide a pinned commit and verifiable install spec.
A changed network patch could be accepted during build or update instead of causing a hard failure, reducing confidence in the node binary being built.
The default accepts patch-hash changes instead of enforcing strict pinning, which weakens the skill's own claim of an immutable, scope-limited chain-identity patch.
`AUTO_ACCEPT_NETWORK_PATCH_HASH` | `1` | Set to `0` for strict patch-hash pinning
Default to strict patch-hash pinning, require explicit user approval for any mismatch, and show the old hash, new hash, and patch diff before continuing.
The install flow may compile software, start network services, and consume CPU/electricity for mining.
Running shell scripts that build software and start a miner is expected for this skill, but it is still local code execution with resource impact.
./install.sh v30.2 ... builds with the immutable patch, starts the node, and optionally starts a CPU miner.
Run only in a controlled directory from a trusted checkout, consider setting START_MINER=0 before install, and set conservative CPU/thread limits.
If enabled or left running, the miner and node may continue consuming local resources after the initial task.
The miner is not hidden and background mode is off by default, but the skill can start long-running mining/node processes when used.
`MINER_BACKGROUND` | `0` | Run miner in background ... `START_MINER` | `1` | Set to `0` to skip miner startup
Confirm before starting mining, keep background mode disabled unless intended, and provide clear stop/uninstall instructions.