Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Monero profitability calculator skill with a disclosed live price lookup and no evidence of hidden persistence, credential use, destructive actions, or exfiltration.
Before installing, treat this as an informational calculator rather than a complete CLI tool. If you run the example Python code, it will contact CoinGecko to retrieve public Monero price data, so avoid adding secrets or private data to the request. The voluntary XMR tip address is disclosed and not automatic.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
def calculate_profitability(hashrate=2000, power=100, cost=0.12):
# Fetch current XMR data
xmr_data = requests.get('https://api.coingecko.com/api/v3/coins/monero').json()
price = xmr_data['market_data']['current_price']['usd']
# Estimate earnings (simplified)
This markdown file includes a Python example that fetches Monero pricing data from an external API using requests.get. The surrounding skill description does not explicitly warn users that using the example involves outbound network access and transmission of request metadata to a third-party service.
The skill is presented as a simple Monero mining profitability calculator, which primarily implies local arithmetic over user-provided inputs. The embedded example script performs an external HTTP request to CoinGecko to fetch live market data, a capability not otherwise justified by the unknown/unstated manifest scope and broader than a purely local calculator.
No suspicious patterns detected.