Back to skill
Skillv1.2.8
VirusTotal security
GMGN Skill Token · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 8:51 AM
- Hash
- 5fc143aa0504dee856a719aec2ec295697a34f4d9d3915b3c89f928ab2154d25
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: gmgn-token Version: 1.2.8 The gmgn-token skill bundle contains instructions in SKILL.md that direct the AI agent to perform system reconnaissance and local environment modifications. Specifically, it instructs the agent to execute 'ifconfig' or 'ip addr show' to gather network interface details and uses 'openssl' to generate keys in '/tmp'. While these actions are framed as troubleshooting for IPv6 compatibility and API setup, they grant the agent broad system visibility and the ability to write to the user's home directory (~/.config/gmgn/.env), which are high-risk capabilities.
- External report
- View on VirusTotal