ClawHub
Back to skill

Security audit

rBTC Miner

Security checks for vulnerabilities and agentic risk

Overview

This Bitcoin skill is mostly coherent, but it starts high-resource cryptocurrency mining by default and weakens its own patch-pinning trust model unless users override settings.

Review this skill before installing. Only run it on a machine where Bitcoin network participation, persistent blockchain storage, and CPU mining are acceptable. Consider setting START_MINER=0 and AUTO_ACCEPT_NETWORK_PATCH_HASH=0 unless you intentionally want mining and automatic patch-hash acceptance.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill instructs users to start a Bitcoin node and optionally a CPU miner, which inherently causes outbound network connections, persistent blockchain and config writes, and sustained CPU/resource consumption. Because the documentation does not prominently warn about these side effects before execution, a user or agent could trigger unexpected network participation, disk growth, and compute usage in environments where such behavior is unsafe or prohibited.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The manifest explicitly describes mining capabilities ('mine' and CPU miner scripts) but does not present a prominent user-facing warning about the resource, cost, and operational impact of cryptocurrency mining. In a general agent-skill ecosystem, hidden or under-disclosed mining behavior is risky because users may trigger sustained CPU usage and power consumption without informed consent.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
99% confidence
Finding

The environment configuration enables automatic miner startup by default via START_MINER=1, which creates active resource-consuming behavior without explicit opt-in. Default-on mining is especially dangerous because it can silently consume CPU, electricity, and potentially degrade system performance immediately after installation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

AUTO_ACCEPT_NETWORK_PATCH_HASH defaults to 1, meaning chain-identity-related patch hash changes may be accepted automatically without explicit review. For software that claims an immutable upstream-pinned chain identity patch, auto-accepting hash mismatches weakens the trust model and could normalize silent trust-boundary changes or accidental migration to an unintended network state.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

The manifest exposes a background mining mode but does not warn that persistent execution can continue consuming system resources after the primary install or session appears complete. This increases the chance that users will unknowingly leave a miner running, causing prolonged CPU load and power usage.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.