Security audit
Security checks across malware telemetry and agentic risk
This appears to be a real RTC mining tool, but it under-discloses telemetry and device identifiers and contradicts its own TLS/security claims.
Install only if you are comfortable with a crypto miner that fingerprints your machine, sends stable device identifiers to RustChain infrastructure, performs some undisclosed telemetry, and stores wallet keys locally. Avoid using BCOS admin credentials with this version, treat exported wallet files as private keys, and prefer a reviewed/fixed release with accurate disclosure and normal TLS verification.
def run_cmd(cmd, check=True, capture=False):
"""Run a shell command."""
try:
result = subprocess.run(
cmd, shell=True, check=check,
capture_output=capture, text=True
)else:
export_data = wallet
with open(export_path, "w") as f:
json.dump(export_data, f, indent=2)
print(f"\n {GREEN}Wallet exported to:{NC} {export_path}")ctx.verify_mode = ssl.CERT_NONE
req = urllib.request.Request(url)
with urllib.request.urlopen(req, context=ctx, timeout=15) as resp:
data = json.loads(resp.read().decode())
if not data.get("ok"):},
method="POST",
)
with urllib.request.urlopen(req, context=ctx, timeout=30) as resp:
data = json.loads(resp.read().decode())
if data.get("ok"):ctx.check_hostname = False
ctx.verify_mode = ssl.CERT_NONE
with urllib.request.urlopen(req, context=ctx, timeout=30) as resp:
pdf_data = resp.read()
out_path = os.path.join(path, f"{cert_id}.pdf")data=payload,
headers={"Content-Type": "application/json"}
)
urllib.request.urlopen(req, timeout=5)
except Exception:
pass
threading.Thread(target=_ping, daemon=True).start()4/65 vendors flagged this skill as malicious, and 61/65 flagged it as clean.
Detected: malicious.crypto_mining, suspicious.dynamic_code_execution, suspicious.exposed_secret_literal (+1 more)