based-mining
Warn
Audited by Snyk on Sep 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow calls various endpoints on x402.bankr.bot and api.basedmining.xyz, which return dynamic API responses containing untrusted third-party data from the mining pool/service.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill documentation describes endpoints (
mine,megapot-ticket) that execute paid calls using USDC on Base through x402 payment rails, specifically handling market purchases and executing financial transactions for buying hashpower and lottery tickets.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata