Back to skill
Skillv1.2.9
VirusTotal security
GMGN Skill Track · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 8:51 AM
- Hash
- f0cc14fced01d1dc964b70e32ccd605a9cd6939fc66033b45b3bc733551c4d01
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: gmgn-track Version: 1.2.9 The skill bundle contains instructions in SKILL.md that direct the AI agent to perform system reconnaissance by executing 'ifconfig' or 'ip addr' to check for IPv6 addresses, and to use 'curl' against 'ipv6.icanhazip.com'. It also involves a setup process where the agent generates an Ed25519 private key using 'openssl' and stores it in '~/.config/gmgn/.env'. While these actions are contextually justified for troubleshooting network connectivity and configuring signed API requests for the 'gmgn-cli' tool, the combination of system-level information gathering and sensitive credential management represents a high-risk profile.
- External report
- View on VirusTotal
