gmgn-track

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The capability matches a crypto-tracking skill, but it unnecessarily centralizes access through an external credential-bearing CLI and requires a private key for one read-oriented feature. This is not confirmed malware, but install trust and credential-forwarding risk are material unless gmgn-cli publisher ownership and official GMGN provenance are independently verified.

Confidence: 80%Severity: 66%
Audit Metadata
Analyzed At
Mar 27, 2026, 07:07 AM
Package URL
pkg:socket/skills-sh/GMGNAI%2Fgmgn-skills%2Fgmgn-track%2F@a25a4df290c621772a9e02201a63bc251fa1d360