gmgn-cooking

SUSPICIOUS. The skill is internally aligned with its stated GMGN token-launch purpose and uses same-org, documented npm distribution, so it is not confirmed malware. However, it grants an AI agent high-impact crypto execution capability, depends on sensitive API/private-key configuration, and routes those credentials through an external CLI package, making the overall security posture high risk despite coherent purpose.