Bitaxe Monitor

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have less provenance information about who maintains the skill, but the provided artifact set is small and self-contained.

Why it was flagged

The registry metadata does not provide upstream provenance, although the supplied artifacts include the full script and no external install step.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the included script before installing and prefer a known upstream source if one becomes available.

What this means

If an incorrect or untrusted IP is configured, the skill may contact the wrong network device.

Why it was flagged

The script performs an HTTP request to whichever IP or host is supplied by argument, config file, or BITAXE_IP, which is expected for a miner monitor but still grants local network access.

Skill content
url = f"http://{ip}/api/system/info"
Recommendation

Configure only the intended Bitaxe miner IP and check the saved config if results look unexpected.

What this means

A stale or edited config file could cause future checks to query a different device than intended.

Why it was flagged

The script stores and later reuses the miner IP from a local config file, creating persistent configuration state across runs.

Skill content
config['bitaxe_ip'] = ip
save_config(config)
Recommendation

Review or remove ~/.config/bitaxe-monitor/config.json if you change devices or no longer want the IP saved.