MinerDetector

Charge 0.01 USDT to export 4 bundled miner signature libraries. No scanning or detection.

Security Scan

The skill is internally consistent: it only bills via a billing API and exports four bundled text files, and its requested API key is proportional to that purpose.

Purpose & Capability

Name/description (billing + export of four signature libraries) matches the code and SKILL.md. Requested python runtime and a single billing API key (MINERDETECTOR_API_KEY) are appropriate for making HTTP calls and returning/writing the bundled files.

Instruction Scope

SKILL.md instructs the agent to run the included Python script to check balance, generate payment links, or fetch/export the 4 bundled files. The skill explicitly states it does not scan system files/processes/networks, and the shipped script only reads the bundled indicator files and optionally writes them to an output directory or returns them as JSON.

Install Mechanism

There is no install spec (instruction-only plus a small included Python script). Nothing is downloaded from remote URLs or written to system locations during install; risk from install mechanism is minimal.

Credentials

The skill requires a single API key (MINERDETECTOR_API_KEY), which is proportionate. One minor discrepancy: the script also reads MINERDETECTOR_BILLING_API_URL (defaulting to https://skillpay.me) but that env var is not declared in SKILL.md's requires list. Because the API key is sent as an X-API-Key header to the billing host, you should only use a key you trust and ensure the billing host is legitimate.

Persistence & Privilege

always is false, the skill does not request persistent system privileges, and it only writes files to an output directory chosen by the user (or returns file contents as JSON). It does not alter other skills or global configuration.

Assessment

This skill appears to do exactly what it says: charge via a billing API and export four bundled text files. Before installing, consider: 1) the script will send MINERDETECTOR_API_KEY to the billing host (default https://skillpay.me) — only use an API key you trust and verify the billing endpoint; 2) the script can return the files as JSON (printed to stdout), which exposes the bundled file contents but does not access any other local data; 3) SKILL.md does not declare the optional MINERDETECTOR_BILLING_API_URL env var that the script can read — avoid setting that to an untrusted host; and 4) this skill does not perform scanning or remediation, so you will need to run your own comparisons against local data. If you want extra safety, create a limited-scope API key for billing and review the small Python script before use.

MinerDetector is a cross-platform billing-and-export skill.

It does not scan disks, processes, networks, firewalls, Defender, or OpenClaw skills. It does not delete, quarantine, or modify files. It only does three things:

1. Check SkillPay balance.
2. Generate a payment link when the balance is low.
3. Charge 0.01 USDT and export the 4 bundled text libraries below.

Bundled libraries:

• indicators/mining_pool_websites.txt
• indicators/mining_software_filenames.txt
• indicators/mining_pool_public_ips.txt
• indicators/mining_pool_ports.txt

Use this skill when the user wants to get or refresh the 4 signature libraries. After export, OpenClaw or the user's own local tooling can compare those files against local data. That comparison step is outside this skill.

Required setup

The user must apply for a billing API key here:

https://x.com/MaZhenZi1/status/2034654798906269916

Then export the key for the current terminal/session:

Linux / macOS

export MINERDETECTOR_API_KEY="your_api_key_here"

Windows PowerShell

$env:MINERDETECTOR_API_KEY = "your_api_key_here"

Commands

1) Check balance

python3 {baseDir}/scripts/miner_detector.py balance --user-id YOUR_USER_ID

If python3 is unavailable, try:

python {baseDir}/scripts/miner_detector.py balance --user-id YOUR_USER_ID

or on Windows:

py -3 {baseDir}/scripts/miner_detector.py balance --user-id YOUR_USER_ID

2) Generate a payment link

python3 {baseDir}/scripts/miner_detector.py payment-link --user-id YOUR_USER_ID --amount 5

3) Charge 0.01 USDT and export the 4 files to a folder

python3 {baseDir}/scripts/miner_detector.py fetch --user-id YOUR_USER_ID --output-dir ./minerdetector-libs

4) Charge 0.01 USDT and return the 4 files as JSON

python3 {baseDir}/scripts/miner_detector.py fetch --user-id YOUR_USER_ID --json-only

Agent behavior

• When the user asks to update, refresh, download, or get the miner signature libraries, run fetch.
• When the user asks to check balance, run balance.
• When the user asks to recharge, top up, or get a payment link, run payment-link.
• When the user asks this skill to scan their computer, be explicit: this skill does not scan. Export the 4 libraries and tell the user to let OpenClaw or their own local workflow do the comparison.
• Keep responses factual. Do not claim that scanning or remediation was performed.

API summary

Skill ID:

82c878f5-1b74-4ee3-a32a-eeb878309ba5

Billing endpoints used by the script:

• GET /api/v1/billing/balance?user_id=xxx
• POST /api/v1/billing/charge
• POST /api/v1/billing/payment-link

Default billing host:

https://skillpay.me

Notes

• This package is text-only and publish-friendly.
• No hardcoded billing secret is included.
• The billing API key is provided by the user at runtime through MINERDETECTOR_API_KEY.
• The 4 bundled libraries are the files included under indicators/.