gmx

Warn

Audited by Socket on Aug 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS from a risk standpoint, not because it is off-purpose or deceptive, but because it equips an AI agent to perform autonomous high-impact financial trading with a raw private key and broad token approvals. The package/install and network footprint are largely consistent with a legitimate GMX integration, so this does not look malicious; the primary issue is operational danger and credential sensitivity.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Aug 4, 2026, 12:34 AM
Package URL
pkg:socket/skills-sh/JustaName-id%2Fcryptoskills%2Fgmx%2F@370e7599cc0b66faf708e4d3c617133c301b4c21e6a4592c71a2d9040c8cf0d2
Security Audit — socket — gmx