← 返回 Skills 市场
528
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install aicash-miner
功能描述
AICash Network auto-miner for $CASH tokens on Base L2. Use when setting up automated Proof of Compute mining on the AICash mempool network. Supports multi-in...
使用说明 (SKILL.md)
AICash Miner
Automated mining agent for the AI CASH MEMPOOL network (aicash.network).
Quick Start
- Get API credentials from https://aicash.network (generate soul.md from browser)
- Run the setup script:
scripts/setup.sh --api-key \x3CKEY> --wallet \x3CWALLET> --endpoint \x3CENDPOINT>
This creates the miner script, systemd service, and starts mining.
Configuration
Required parameters:
--api-key— API key from aicash.network (format:cash_xxx)--wallet— EVM wallet address for rewards--endpoint— Supabase mining endpoint URL
Optional:
--name \x3Cname>— Service name (default:aicash-miner)--instances \x3Cn>— Number of parallel miners (default: 1)
Multi-Instance Mining
Run multiple miners to increase block capture rate:
scripts/setup.sh --api-key \x3CKEY> --wallet \x3CWALLET> --endpoint \x3CENDPOINT> --instances 6
Creates 6 independent systemd services: aicash-miner, aicash-miner-2 through aicash-miner-6.
Management
# Check status
scripts/status.sh
# Stop all miners
scripts/stop.sh
# Start all miners
scripts/start.sh
# Update API credentials
scripts/setup.sh --api-key \x3CNEW_KEY> --wallet \x3CWALLET> --endpoint \x3CNEW_ENDPOINT>
How It Works
- Probes API with invalid block number to discover current block
- Submits Proof of Compute for current block
- Logs real reward amount from API response
- Auto-retries on errors, skips claimed blocks
- Runs 24/7 via systemd with auto-restart
安全使用建议
This skill includes scripts that will (a) write a miner binary into /root/.openclaw/workspace/aicash, (b) embed your API key and wallet into that file in plaintext, and (c) create/enable systemd services under /etc/systemd/system and start them — actions that require root. Before installing:
- Do not run the setup on your primary host without understanding the implications; run in an isolated VM or container first.
- Verify you are willing to grant root privileges: the setup calls systemctl and writes to /etc and /root.
- Confirm a legitimate endpoint domain (the SKILL.md references aicash.network and a Supabase endpoint). If the endpoint differs, do not supply real keys.
- Be aware the API key is written to disk inside miner.js (plaintext). Treat that key as compromised if you install; rotate it if you decide to remove the service.
- Ensure Node is installed and examine miner.js and the systemd unit(s) line-by-line before running. If you prefer less privilege, modify the scripts to run under an unprivileged user and avoid enabling services system-wide.
Overall: the code implements the claimed mining functionality, but it performs undeclared, high-privilege, persistent system changes and stores secrets on disk — consider this suspicious and review/contain it before use.
功能分析
Type: OpenClaw Skill
Name: aicash-miner
Version: 1.0.0
The skill bundle is classified as suspicious due to critical shell injection and arbitrary file write vulnerabilities in `scripts/setup.sh`. User-provided arguments such as `--api-key`, `--wallet`, `--endpoint`, and especially `--name` are used directly in `sed` commands and systemd service file creation without proper sanitization. This allows for remote code execution or arbitrary file writes (e.g., to `/etc/systemd/system/`) if crafted inputs containing shell metacharacters or path traversal sequences are provided. The `scripts/start.sh`, `scripts/status.sh`, and `scripts/stop.sh` scripts are also vulnerable to command injection if a maliciously named service was previously created via `setup.sh`.
能力评估
Purpose & Capability
The skill's stated purpose (automated mining) matches the included scripts and miner logic, but the required system-level actions (writing to /root/.openclaw, creating files in /etc/systemd/system, enabling services) imply the need for root privileges and a Node runtime. The registry metadata declares no required binaries or privileged access, which is inconsistent with the actual behavior.
Instruction Scope
SKILL.md instructs the user to run scripts/setup.sh with API key/wallet/endpoint. The setup script then embeds the API key and wallet into a generated miner.js (via sed), writes that file to disk, creates/enables systemd service units, and starts them. The runtime instructions therefore direct the agent to modify system configuration and persist secrets to disk — actions that go beyond a simple CLI invocation and should be clearly declared and gated.
Install Mechanism
There is no external download/install spec (no network fetches, packages, or archives). That reduces some risk. However, the included setup script performs an implicit local install: creating an install directory under /root/.openclaw, generating miner.js, and writing systemd unit files under /etc/systemd/system. This is an on-disk install performed by the provided script and requires filesystem write permissions.
Credentials
The skill asks for an API key, wallet, and endpoint as CLI arguments (reasonable for a miner), but the package metadata declared no required env vars or primary credential. The setup embeds the API key directly into miner.js on disk (plaintext), which increases credential exposure. The service units run the miner likely as root (Environment=HOME=/root) and the scripts call systemctl; requiring root privileges is not disclosed in the metadata.
Persistence & Privilege
The setup script creates systemd services and enables/starts them (systemctl enable --now), giving the miner ongoing persistence and auto-restart at system level. This modifies system-wide configuration (/etc/systemd/system), which is a high-privilege, persistent action that should be explicitly declared and confirmed before install.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install aicash-miner - 安装完成后，直接呼叫该 Skill 的名称或使用
/aicash-miner触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: automated CASH mining on Base L2 with multi-instance support
元数据
常见问题
AICash Miner 是什么？
AICash Network auto-miner for $CASH tokens on Base L2. Use when setting up automated Proof of Compute mining on the AICash mempool network. Supports multi-in... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 528 次。
如何安装 AICash Miner？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install aicash-miner」即可一键安装，无需额外配置。
AICash Miner 是免费的吗？
是的，AICash Miner 完全免费（开源免费），可自由下载、安装和使用。
AICash Miner 支持哪些平台？
AICash Miner 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 AICash Miner？
由 meigui（@doctor-1017）开发并维护，当前版本 v1.0.0。
推荐 Skills