Back to skill
Skillv1.2.9

VirusTotal security

GMGN Skill Track · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 29, 2026, 8:51 AM
Hash
f0cc14fced01d1dc964b70e32ccd605a9cd6939fc66033b45b3bc733551c4d01
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: gmgn-track Version: 1.2.9 The skill bundle contains instructions in SKILL.md that direct the AI agent to perform system reconnaissance by executing 'ifconfig' or 'ip addr' to check for IPv6 addresses, and to use 'curl' against 'ipv6.icanhazip.com'. It also involves a setup process where the agent generates an Ed25519 private key using 'openssl' and stores it in '~/.config/gmgn/.env'. While these actions are contextually justified for troubleshooting network connectivity and configuring signed API requests for the 'gmgn-cli' tool, the combination of system-level information gathering and sensitive credential management represents a high-risk profile.
External report
View on VirusTotal