gmx
Warn
Audited by Socket on Aug 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS from a risk standpoint, not because it is off-purpose or deceptive, but because it equips an AI agent to perform autonomous high-impact financial trading with a raw private key and broad token approvals. The package/install and network footprint are largely consistent with a legitimate GMX integration, so this does not look malicious; the primary issue is operational danger and credential sensitivity.
Confidence: 90%Severity: 78%
Audit Metadata