gang

Warn

Audited by Socket on Oct 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The purpose and blockchain trading capabilities are internally consistent, and the skill includes meaningful user-confirmation steps. However, it enables real-money token actions and depends on an unverified `gang` CLI to build transaction calldata while an official Binance wallet CLI signs/broadcasts them; that provenance gap makes the footprint high risk and disproportionate to trust without stronger release verification.

Confidence: 89%Severity: 83%
Audit Metadata
Analyzed At
Oct 24, 2026, 06:48 AM
Package URL
pkg:socket/skills-sh/gangfun%2Fgang-launchpad%2Fgang%2F@93653e5e75020f239465b6d39191d756b46a9a1f185ae3a29b00058a1021cc32