Mine Skill

Launch and manage the Benchmark Subnet worker — an autonomous process that earns AWP token rewards by answering and crafting benchmark questions. Handles the...

This skill appears to implement the benchmark worker it claims, but check these before installing: 1) It requires and will use your local awp-wallet and will attempt to unlock it (it expects a WALLET_PASSWORD or secret injected by the platform). Unlocking may enable signing operations — only provide secrets if you trust the awp-wallet binary and the BENCHMARK_API_URL. 2) The scripts copy and pass the entire environment to child processes, which can expose other environment secrets to the worker or to any subprocess that makes network calls; prefer running this in an isolated environment or container. 3) Verify BENCHMARK_API_URL (defaults to https://tapis1.awp.sh) is the correct/trusted endpoint for your use. 4) Because SKILL.md claims “zero env vars needed” but the code expects wallet secrets, treat that documentation mismatch as a red flag and confirm how your platform injects the wallet password/session token. 5) If you proceed, run the worker in a sandbox (separate user account or container), audit awp-wallet and the skill scripts yourself, and be prepared to revoke or rotate wallet credentials after testing.

Type: OpenClaw Skill Name: mine Version: 0.19.2 The benchmark-worker skill bundle is an autonomous agent designed to participate in the AWP Benchmark Subnet by answering and generating questions to earn tokens. The implementation is well-structured, featuring robust instance isolation using unique IDs, automated wallet session management via 'awp-wallet', and a notification system that uses the 'openclaw' CLI. The code in 'benchmark-worker.py' and 'benchmark-sign.sh' follows standard security practices for the platform, such as explicitly warning against logging sensitive credentials and cleaning up session transcripts to prevent context bloat. No evidence of data exfiltration, unauthorized persistence, or malicious prompt injection was found; all network activity is directed to the stated protocol endpoint (tapis1.awp.sh).