Security audit

Bitaxe Monitor

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Bitaxe miner status checker, with disclosed local config storage and network access, but users should only configure trusted miner IPs.

Install only if you intend to query a Bitaxe or compatible miner. Configure the IP yourself, prefer a trusted private LAN address, and avoid using this in environments where a mistaken or attacker-controlled address could reach sensitive internal HTTP services.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/bitaxe_status.py:70
Finding: Unrestricted Network Destination Enables Server-Side Request Forgery
Content: View full analysis
dict: """Fetch system info from Bitaxe Gamma API.""" url = f"http://{ip}/api/system/info" try: with urllib.request.urlopen(url, timeout=10) as response: return json.loads(response.read().decode('utf-8')) except urllib.error.URLError as e: raise ConnectionError(f"Failed to connect to Bitaxe at {ip}: {e}") except json.JSONDecodeError as e: raise ValueError(f"Invalid JSON response: {e}") ``` The destination is obtained from a command-line argument, configuration file, or environment variable and passed directly to the network function: ```python # Determine which IP to use (priority: arg > config file > env var) ip = args.ip if not ip: ip = get_saved_ip() if not ip: parser.error( "No IP provided. Either:\n" " - Pass IP as argument: bitaxe_status.py \n" " - Save IP to config: bitaxe_status.py --set-ip \n" " - Set BITAXE_IP environment variable" ) source = "config file" if load_config().get('bitaxe_ip') else "environment variable" print(f"📡 Using Bitaxe IP from {source}: {ip}\n") # Fetch and display status try: data = fetch_bitaxe_status(ip) if args.format == "json": print(json.dumps(data, indent=2)) else: print(format_text(data)) ``` ### Technical Analysis Although the variable is described as an IP address, no validation ensures that it is an IP literal, belongs to an approved private subnet, or identifies a Bitaxe device. The value is interpolated directly into an HTTP URL and passed to `urllib.request.urlopen()`. Consequently, anyone able to ...[truncated 2630 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 92% confidence
Finding: The skill documentation describes capabilities that read environment variables, read and write files under the user's home directory, and make HTTP network requests, but it does not declare any explicit tool scope such as permissions or allowed-tools. This creates a governance gap: an agent platform may expose broader capabilities than users expect, reducing transparency and increasing the risk of unintended file modification, environment access, or network interaction.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.