gmgn-swap

The skill is purpose-aligned and its install/data flow appear consistent with official GMGN tooling, so this is not strong evidence of malware. However, it is intrinsically high risk because it grants an AI agent the ability to execute real crypto trades and strategy orders using local private-key-based authorization through an external CLI. Overall classification: SUSPICIOUS due to high-impact financial execution and sensitive credential use, not because of clear deception or exfiltration.