Bitaxe Monitor

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: bitaxe-monitor Version: 1.0.2 The skill bundle is designed to monitor Bitaxe Gamma Bitcoin miners via their HTTP API. The `SKILL.md` provides clear, benign instructions without any prompt injection attempts. The `scripts/bitaxe_status.py` script uses standard Python libraries (`urllib.request`, `json`, `os`) to fetch data from a user-specified IP address (either via argument, config file `~/.config/bitaxe-monitor/config.json`, or `BITAXE_IP` environment variable) and display it. There is no evidence of data exfiltration, malicious execution, persistence, or obfuscation. All actions are consistent with the stated purpose.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have less provenance information about who maintains the skill, but the provided artifact set is small and self-contained.

Why it was flagged

The registry metadata does not provide upstream provenance, although the supplied artifacts include the full script and no external install step.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the included script before installing and prefer a known upstream source if one becomes available.

What this means

If an incorrect or untrusted IP is configured, the skill may contact the wrong network device.

Why it was flagged

The script performs an HTTP request to whichever IP or host is supplied by argument, config file, or BITAXE_IP, which is expected for a miner monitor but still grants local network access.

Skill content
url = f"http://{ip}/api/system/info"
Recommendation

Configure only the intended Bitaxe miner IP and check the saved config if results look unexpected.

What this means

A stale or edited config file could cause future checks to query a different device than intended.

Why it was flagged

The script stores and later reuses the miner IP from a local config file, creating persistent configuration state across runs.

Skill content
config['bitaxe_ip'] = ip
save_config(config)
Recommendation

Review or remove ~/.config/bitaxe-monitor/config.json if you change devices or no longer want the IP saved.