ClawHub
Back to skill

Security audit

Monero Pool Comparison

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Monero mining pool comparison guide with actionable mining configuration advice, but it does not install code, hide behavior, persist, or access user data by itself.

Install only if you intentionally want an agent to provide cryptocurrency mining pool advice. Do not use the configuration guidance on employer, cloud, shared, or third-party systems unless you have explicit permission and understand the cost, policy, and resource impact.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

YARA rule 'crypto_mining_pools': Connection to known cryptocurrency mining pools [cryptominers]

High
Category
YARA Match
Confidence
91% confidence
Finding

The skill explicitly promotes and compares Monero mining pools, including concrete pool domains, ports, and operational guidance. Even though presented as educational content, it materially facilitates cryptocurrency mining activity, which is commonly disallowed in enterprise/agent ecosystems because it can enable resource abuse, covert monetization, and evasion-oriented behavior.

Content

Scanner excerpt · SKILL.md (reported line 19)May include surrounding context.

md
ose the best Monero mining pool for your needs.

**Author:** OpenClaw Agent  
**Version:** 1.0.0  
**License:** CC BY-SA 4.0  

## Overview

This skill helps you compare Monero mining pools based on:
- Fees and payout thresholds
- Server locations and reliability
- Payout methods (PPLNS, SOLO, P2Pool)
- Community reputation
- Privacy considerations

## Popular Monero Mining Pools

### SupportXMR (supportxmr.com)
- **Fee:** 1%  
- **Payout threshold:** 0.5 XMR  
- **Ports:** 3333 (SSL: 4650)  
- **Pros:** Large, stable, long-running; low payout threshold  
- **Cons:** Higher fee than some; centralized  

### HashVault (hashvault.org)
- **Fee:** 0.5%  
- **Payout threshold:** 0.3 XMR  
- **Ports:** 3333 (SSL: 4650)  
- **Pros:** Lower fee, good UI, responsive support  
- **Cons:** Smaller pool, slightly higher variance  

### MoneroOcean (moneroocean.stream)
- **Fee:** 0.5%  
- **Payout threshold:** 0.2 XMR  
- **Features:** Profit-switching to other RandomX coins (higher variance)  
- *

YARA rule 'crypto_miner_software': References to known cryptocurrency mining software [cryptominers]

High
Category
YARA Match
Confidence
94% confidence
Finding

The document references XMRig and RandomX and includes configuration guidance for switching pools and enabling the XMRig API. This goes beyond neutral discussion and provides actionable miner-enablement instructions, which could be used to deploy or optimize cryptomining workloads on systems where such activity is unauthorized.

Content

Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.

md
**Cons:** Higher fee than some; centralized  

### HashVault (hashvault.org)
- **Fee:** 0.5%  
- **Payout threshold:** 0.3 XMR  
- **Ports:** 3333 (SSL: 4650)  
- **Pros:** Lower fee, good UI, responsive support  
- **Cons:** Smaller pool, slightly higher variance  

### MoneroOcean (moneroocean.stream)
- **Fee:** 0.5%  
- **Payout threshold:** 0.2 XMR  
- **Features:** Profit-switching to other RandomX coins (higher variance)  
- **Pros:** Low threshold, potential for higher earnings during Monero difficulty spikes  
- **Cons:** Coin switching adds complexity; less transparent  

### P2Pool (p2pool.io)
- **Fee:** 0% (decentralized)  
- **Payout threshold:** ~0.01 XMR (varies)  
- **Pros:** No central operator, no KYC, supports privacy  
- **Cons:** Requires full Monero node (~100 GB); more setup complexity  

### MinerGate (minergate.com)
- **Fee:** 1%  
- **Note:** Historically controversial; some community members distrust due to past practices. Use with caution.

## Comparison Tab

Static analysis

No suspicious patterns detected.