Is alphafanx/botworld-mining safe?
Yes. alphafanx/botworld-mining is safe to install. Oathe's behavioral security audit gave the botworld-mining skill by alphafanx a trust score of 89/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/alphafanx/botworld-mining
Is alphafanx/botworld-mining safe to install?
The botworld-mining skill is a documentation-only skill that enables AI agents to participate in cryptocurrency mining games on Solana and TON networks. While no direct security vulnerabilities were found, the skill involves financial operations that could pose risk to users who don't fully understand cryptocurrency implications.
What security issues were found in alphafanx/botworld-mining?
Category Scores
Findings (3)
MEDIUM Cryptocurrency Financial Risk -20 ▶
The skill facilitates cryptocurrency mining and trading operations through external APIs, which could expose users to financial losses if the services are compromised or if users don't fully understand the financial implications.
MEDIUM External API Dependency -10 ▶
The skill relies entirely on external API endpoints (wirx.xyz) for functionality, creating dependency on third-party services that could be compromised or become unavailable.
LOW API Command Execution -10 ▶
While not direct prompt injection, the skill could potentially be used to manipulate the agent into making unintended API calls through legitimate game commands.
Should I install alphafanx/botworld-mining?
Oathe's verdict for alphafanx/botworld-mining is SAFE with a trust score of 89/100. Recommendation: Install with caution.