← Back to Skills Marketplace
528
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install aicash-miner
Description
AICash Network auto-miner for $CASH tokens on Base L2. Use when setting up automated Proof of Compute mining on the AICash mempool network. Supports multi-in...
README (SKILL.md)
AICash Miner
Automated mining agent for the AI CASH MEMPOOL network (aicash.network).
Quick Start
- Get API credentials from https://aicash.network (generate soul.md from browser)
- Run the setup script:
scripts/setup.sh --api-key \x3CKEY> --wallet \x3CWALLET> --endpoint \x3CENDPOINT>
This creates the miner script, systemd service, and starts mining.
Configuration
Required parameters:
--api-key— API key from aicash.network (format:cash_xxx)--wallet— EVM wallet address for rewards--endpoint— Supabase mining endpoint URL
Optional:
--name \x3Cname>— Service name (default:aicash-miner)--instances \x3Cn>— Number of parallel miners (default: 1)
Multi-Instance Mining
Run multiple miners to increase block capture rate:
scripts/setup.sh --api-key \x3CKEY> --wallet \x3CWALLET> --endpoint \x3CENDPOINT> --instances 6
Creates 6 independent systemd services: aicash-miner, aicash-miner-2 through aicash-miner-6.
Management
# Check status
scripts/status.sh
# Stop all miners
scripts/stop.sh
# Start all miners
scripts/start.sh
# Update API credentials
scripts/setup.sh --api-key \x3CNEW_KEY> --wallet \x3CWALLET> --endpoint \x3CNEW_ENDPOINT>
How It Works
- Probes API with invalid block number to discover current block
- Submits Proof of Compute for current block
- Logs real reward amount from API response
- Auto-retries on errors, skips claimed blocks
- Runs 24/7 via systemd with auto-restart
Usage Guidance
This skill includes scripts that will (a) write a miner binary into /root/.openclaw/workspace/aicash, (b) embed your API key and wallet into that file in plaintext, and (c) create/enable systemd services under /etc/systemd/system and start them — actions that require root. Before installing:
- Do not run the setup on your primary host without understanding the implications; run in an isolated VM or container first.
- Verify you are willing to grant root privileges: the setup calls systemctl and writes to /etc and /root.
- Confirm a legitimate endpoint domain (the SKILL.md references aicash.network and a Supabase endpoint). If the endpoint differs, do not supply real keys.
- Be aware the API key is written to disk inside miner.js (plaintext). Treat that key as compromised if you install; rotate it if you decide to remove the service.
- Ensure Node is installed and examine miner.js and the systemd unit(s) line-by-line before running. If you prefer less privilege, modify the scripts to run under an unprivileged user and avoid enabling services system-wide.
Overall: the code implements the claimed mining functionality, but it performs undeclared, high-privilege, persistent system changes and stores secrets on disk — consider this suspicious and review/contain it before use.
Capability Analysis
Type: OpenClaw Skill
Name: aicash-miner
Version: 1.0.0
The skill bundle is classified as suspicious due to critical shell injection and arbitrary file write vulnerabilities in `scripts/setup.sh`. User-provided arguments such as `--api-key`, `--wallet`, `--endpoint`, and especially `--name` are used directly in `sed` commands and systemd service file creation without proper sanitization. This allows for remote code execution or arbitrary file writes (e.g., to `/etc/systemd/system/`) if crafted inputs containing shell metacharacters or path traversal sequences are provided. The `scripts/start.sh`, `scripts/status.sh`, and `scripts/stop.sh` scripts are also vulnerable to command injection if a maliciously named service was previously created via `setup.sh`.
Capability Assessment
Purpose & Capability
The skill's stated purpose (automated mining) matches the included scripts and miner logic, but the required system-level actions (writing to /root/.openclaw, creating files in /etc/systemd/system, enabling services) imply the need for root privileges and a Node runtime. The registry metadata declares no required binaries or privileged access, which is inconsistent with the actual behavior.
Instruction Scope
SKILL.md instructs the user to run scripts/setup.sh with API key/wallet/endpoint. The setup script then embeds the API key and wallet into a generated miner.js (via sed), writes that file to disk, creates/enables systemd service units, and starts them. The runtime instructions therefore direct the agent to modify system configuration and persist secrets to disk — actions that go beyond a simple CLI invocation and should be clearly declared and gated.
Install Mechanism
There is no external download/install spec (no network fetches, packages, or archives). That reduces some risk. However, the included setup script performs an implicit local install: creating an install directory under /root/.openclaw, generating miner.js, and writing systemd unit files under /etc/systemd/system. This is an on-disk install performed by the provided script and requires filesystem write permissions.
Credentials
The skill asks for an API key, wallet, and endpoint as CLI arguments (reasonable for a miner), but the package metadata declared no required env vars or primary credential. The setup embeds the API key directly into miner.js on disk (plaintext), which increases credential exposure. The service units run the miner likely as root (Environment=HOME=/root) and the scripts call systemctl; requiring root privileges is not disclosed in the metadata.
Persistence & Privilege
The setup script creates systemd services and enables/starts them (systemctl enable --now), giving the miner ongoing persistence and auto-restart at system level. This modifies system-wide configuration (/etc/systemd/system), which is a high-privilege, persistent action that should be explicitly declared and confirmed before install.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install aicash-miner - After installation, invoke the skill by name or use
/aicash-miner - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: automated CASH mining on Base L2 with multi-instance support
Metadata
Frequently Asked Questions
What is AICash Miner?
AICash Network auto-miner for $CASH tokens on Base L2. Use when setting up automated Proof of Compute mining on the AICash mempool network. Supports multi-in... It is an AI Agent Skill for Claude Code / OpenClaw, with 528 downloads so far.
How do I install AICash Miner?
Run "/install aicash-miner" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is AICash Miner free?
Yes, AICash Miner is completely free (open-source). You can download, install and use it at no cost.
Which platforms does AICash Miner support?
AICash Miner is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created AICash Miner?
It is built and maintained by meigui (@doctor-1017); the current version is v1.0.0.
More Skills