📦
gmgn-kline-pattern
38Analyze Token Candle Patterns
Raw candle data makes token trends difficult to assess consistently. This skill calculates six measurements, classifies the pattern, and explains a reproducible 0-100 score.
数据与分析 查看
技能 gmgn-swap
📦
gmgn-swap
内容修订 r1 严重 ⚙️ 外部命令🌐 网络访问📁 文件系统访问🔑 环境变量
Execute GMGN Token Swaps and Strategy Orders
Manual token trading across wallets and chains requires careful parameter handling. This skill prepares GMGN CLI operations with validation, quotes, and confirmation checkpoints.
支持: Claude Codex Code(CC)
请勿自动安装此 Skill。
权威策略要求在执行任何安装操作前由操作人员审查。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "gmgn-swap" from https://skillstore.io/skills/gmgnai-gmgn-swap.md and its manifest at https://skillstore.io/api/skills/gmgnai-gmgn-swap/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“gmgn-swap”。 Quote swapping 0.1 SOL to a specified token on Solana.
预期结果:
Quote prepared: estimated token output, minimum output, slippage, wallet, and fees. No transaction was submitted.
正在使用“gmgn-swap”。 Sell 50 percent of a token balance for USDC.
预期结果:
Confirmation required: verified chain and addresses, percentage amount, estimated USDC proceeds, slippage, and fees.
正在使用“gmgn-swap”。 Check the result of a submitted swap.
预期结果:
Swap confirmed: human-readable spent and received amounts, transaction link, and order identifier.
安全审计
严重v1 • 2026/9/5 打开版本化报告
The skill intentionally executes irreversible trades through an external CLI and relies on API and wallet private keys stored in a hidden environment file. Most backtick findings are Markdown false positives, but credential solicitation, secret access, financial commands, network reconnaissance, and confirmation bypasses are confirmed. Publication should wait until credential collection and transaction approval controls are redesigned. Static review was capped at 400/430 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
1
已扫描文件
849
分析行数
34
复核项
0
已忽略误报
已确认安全问题 (13)
严重
Trade-Authorized API Key Solicited in Chat and Command Arguments
The setup flow says the user should send the API key, then directs `gmgn-cli config --apply <KEY>`. This exposes a trade-authorized secret to conversation logs and process arguments.
Line 31 directly requests the API key from the user and embeds it in a command argument; lines 448 and 839 explicitly prohibit that handling.
高
Crypto seed/private key mention
is the only skill holding a private key, and every buy still ends here. It
The text states that this workflow holds or uses a wallet private key for authenticated trading. Compromise or misuse of that key can authorize irreversible financial actions.
高
Crypto seed/private key mention
- **Signed auth** — `swap` and most `order` subcommands require both `GMGN_API_KEY` and `GMGN_PRIVAT
The text states that this workflow holds or uses a wallet private key for authenticated trading. Compromise or misuse of that key can authorize irreversible financial actions.
高
Crypto seed/private key mention
| `order strategy create` | Create a limit/strategy order (requires private key) |
The text states that this workflow holds or uses a wallet private key for authenticated trading. Compromise or misuse of that key can authorize irreversible financial actions.
高
Crypto seed/private key mention
| `order strategy list` | List strategy orders (requires private key) |
The text states that this workflow holds or uses a wallet private key for authenticated trading. Compromise or misuse of that key can authorize irreversible financial actions.
高
Crypto seed/private key mention
| `order strategy cancel` | Cancel a strategy order (requires private key) |
The text states that this workflow holds or uses a wallet private key for authenticated trading. Compromise or misuse of that key can authorize irreversible financial actions.
高
Crypto seed/private key mention
`GMGN_API_KEY` must be configured in `~/.config/gmgn/.env`. `GMGN_PRIVATE_KEY` is additionally requi
The text states that this workflow holds or uses a wallet private key for authenticated trading. Compromise or misuse of that key can authorize irreversible financial actions.
高
Crypto seed/private key mention
- `GMGN_PRIVATE_KEY` is used exclusively for **local message signing** — the private key never leave
The text states that this workflow holds or uses a wallet private key for authenticated trading. Compromise or misuse of that key can authorize irreversible financial actions.
显示全部 13 条已确认问题
高
Environment file access
`GMGN_API_KEY` must be configured in `~/.config/gmgn/.env`. `GMGN_PRIVATE_KEY` is additionally requi
The CLI is instructed to read GMGN API and private keys from a hidden .env file. Plaintext credential storage and automated access create a direct secret-exposure risk.
高
Environment file access
- Both `GMGN_API_KEY` and `GMGN_PRIVATE_KEY` are read from the `.env` file by the CLI at startup. Th
The CLI is instructed to read GMGN API and private keys from a hidden .env file. Plaintext credential storage and automated access create a direct secret-exposure risk.
高
Token Safety Checks Can Be Bypassed for Irreversible Purchases
The skill permits users to skip its limited token check and proceed with a contract address. This can enable copycat, honeypot, or rug-token purchases without independent verification.
The documented entry flow and explicit override both allow execution without the required pre-swap check, while the skill acknowledges its check is incomplete.
高
Persistent Automation Flag Removes Per-Trade Human Confirmation
A preconfigured environment flag combined with `--yes` bypasses the terminal confirmation. An agent can then submit irreversible trades without fresh human approval for each transaction.
The documentation explicitly defines a headless path that suppresses confirmation whenever the persistent environment flag and command option are present.
低
Network reconnaissance
**⚠️ IPv6 NOT SUPPORTED: If you get a `401` or `403` error and credentials look correct, check for I
The line instructs enumeration of local IPv6 interfaces and an external IP check. This is limited network reconnaissance for troubleshooting, but it still discloses network configuration.
能力复核项 (34)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
严重
Ruby/shell backtick execution
**BEFORE RUNNING ANY COMMAND: Run `gmgn-cli config --check`. If exit code is 0, proceed normally. If
This instruction runs external configuration commands and places a user-supplied API key in a command argument. That can expose a trade-authorized credential through chat, process listings, or shell history.
高
Generic API/secret keys
Use the `gmgn-cli` tool to submit a token swap or query an existing order. `GMGN_API_KEY` is always
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Generic API/secret keys
- **Signed auth** — `swap` and most `order` subcommands require both `GMGN_API_KEY` and `GMGN_PRIVAT
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Generic API/secret keys
`GMGN_API_KEY` must be configured in `~/.config/gmgn/.env`. `GMGN_PRIVATE_KEY` is additionally requi
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Generic API/secret keys
Before displaying the confirmation, run `order quote` to get the estimated output (requires signed a
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Generic API/secret keys
Submit a token swap across multiple wallets concurrently. Each wallet executes independently — one w
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Generic API/secret keys
- Both `GMGN_API_KEY` and `GMGN_PRIVATE_KEY` are read from the `.env` file by the CLI at startup. Th
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Generic API/secret keys
- `GMGN_PRIVATE_KEY` is used exclusively for **local message signing** — the private key never leave
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Generic API/secret keys
- `GMGN_API_KEY` is transmitted in the `X-APIKEY` request header to GMGN's servers over HTTPS.
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Generic API/secret keys
Get an estimated output amount before submitting a swap. Uses normal auth — only `GMGN_API_KEY` requ
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Generic API/secret keys
- `order strategy create`, `order strategy list`, and `order strategy cancel` use signed auth (requi
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Generic API/secret keys
- **Credential sensitivity** — `GMGN_API_KEY` and `GMGN_PRIVATE_KEY` can directly execute trades on
The line documents active use of GMGN credentials for authenticated CLI operations. These credentials can execute trades on linked wallets and therefore represent sensitive environment access.
高
Hidden file in home directory
`GMGN_API_KEY` must be configured in `~/.config/gmgn/.env`. `GMGN_PRIVATE_KEY` is additionally requi
The skill requires reading API and private keys from a hidden file under the user home directory. Access to that plaintext credential file is security-sensitive.
高
Ruby/shell backtick execution
Use the `gmgn-cli` tool to submit a token swap or query an existing order. `GMGN_API_KEY` is always
The line directs use of gmgn-cli to submit token swaps and query orders. The external command can initiate irreversible financial transactions.
高
Ruby/shell backtick execution
- Every `swap` and `order strategy create` command submits an on-chain transaction that moves real f
The text confirms that the named external commands submit on-chain transactions moving real funds. This is an intentional, high-impact command capability.
高
Ruby/shell backtick execution
```bash
This fenced shell block contains gmgn-cli swap commands that submit irreversible token trades. The external command examples are intended for execution by the agent.
高
Ruby/shell backtick execution
```bash
This fenced shell example invokes gmgn-cli swap with conditional sell orders. Execution can move funds and create follow-on financial actions.
高
Ruby/shell backtick execution
```bash
This fenced shell example invokes gmgn-cli swap with fixed-amount strategy conditions. Execution can move funds and create follow-on orders.
高
Ruby/shell backtick execution
Submit a token swap across multiple wallets concurrently. Each wallet executes independently — one w
The section directs concurrent swaps across as many as 100 wallets. This external operation can move funds from multiple accounts in one request.
高
Ruby/shell backtick execution
```bash
This fenced shell block contains multi-swap commands that can execute token trades across multiple wallets. The examples are intended operational commands.
高
Ruby/shell backtick execution
```bash
This fenced shell block creates take-profit, stop-loss, and smart-trade orders. These commands authorize future financial transactions using the linked wallet.
高
Ruby/shell backtick execution
```bash
This fenced shell block invokes strategy cancellation. Canceling an active protective or limit order changes the wallet owner's financial exposure.
中
Hidden file access
`GMGN_API_KEY` must be configured in `~/.config/gmgn/.env`. `GMGN_PRIVATE_KEY` is additionally requi
The skill requires reading API and private keys from a hidden file under the user home directory. Access to that plaintext credential file is security-sensitive.
中
Ruby/shell backtick execution
**IMPORTANT: Always use `gmgn-cli` commands below. Do NOT use web search, WebFetch, curl, or visit g
The line explicitly directs the agent to use the external gmgn-cli program for all swap operations. The command execution is intentional and central to the skill.
中
Ruby/shell backtick execution
**⚠️ IPv6 NOT SUPPORTED: If you get a `401` or `403` error and credentials look correct, check for I
The instruction executes local network-enumeration commands and sends a request to an external IP service. This is real external command execution, although its stated purpose is IPv6 troubleshooting.
中
Ruby/shell backtick execution
- **`order_id` / `status`** — After submitting a swap, the response includes an `order_id`. Use `ord
The line instructs the agent to invoke order get for status polling. This is a real authenticated external command, although it is read-only.
中
Ruby/shell backtick execution
- `gmgn-cli` installed globally — if missing, run: `npm install -g gmgn-cli`
The line instructs a global npm installation of gmgn-cli. This is real external command execution with package supply-chain and system-wide installation risk.
中
Ruby/shell backtick execution
Before displaying the confirmation, run `order quote` to get the estimated output (requires signed a
The line explicitly instructs the agent to run order quote before confirmation. This is a real authenticated external command, but the operation is described as read-only.
中
Ruby/shell backtick execution
```bash
This fenced shell block invokes gmgn-cli order quote. The external command performs an authenticated network request without submitting a transaction.
中
Ruby/shell backtick execution
```bash
This fenced shell block invokes the authenticated order quote command. It is real external command execution, though it does not submit a trade.
中
Ruby/shell backtick execution
```bash
This fenced shell block invokes the authenticated order get command. It queries order state and does not itself submit a transaction.
中
Ruby/shell backtick execution
```bash
This fenced shell block invokes gmgn-cli gas-price against remote services. The commands are read-only but require external process and network access.
中
Ruby/shell backtick execution
```bash
This fenced shell block invokes authenticated strategy-list commands. The operation is read-only but still executes an external CLI with wallet credentials.
低
Hardcoded URL
**⚠️ IPv6 NOT SUPPORTED: If you get a `401` or `403` error and credentials look correct, check for I
The troubleshooting flow sends a request to a fixed third-party IP service, revealing the user's public address. The endpoint is purposeful but creates an external network and privacy dependency.
风险因素
⚙️ 外部命令 (50)
SKILL.md:19 SKILL.md:20 SKILL.md:31 SKILL.md:33 SKILL.md:37 SKILL.md:39 SKILL.md:43 SKILL.md:45 SKILL.md:47 SKILL.md:51 SKILL.md:53 SKILL.md:55 SKILL.md:57 SKILL.md:63 SKILL.md:70 SKILL.md:72 SKILL.md:73 SKILL.md:82 SKILL.md:83 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:88 SKILL.md:89 SKILL.md:93 SKILL.md:97 SKILL.md:99 SKILL.md:103 SKILL.md:104 SKILL.md:105 SKILL.md:106 SKILL.md:110 SKILL.md:112 SKILL.md:116 SKILL.md:120 SKILL.md:121 SKILL.md:122 SKILL.md:123 SKILL.md:124 SKILL.md:125 SKILL.md:126 SKILL.md:127 SKILL.md:129 SKILL.md:131 SKILL.md:133 SKILL.md:134 SKILL.md:135 SKILL.md:136 SKILL.md:137
🌐 网络访问 (7)
📁 文件系统访问 (5)
检测到的模式
Network reconnaissance
审计者: codex
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/gmgnai-gmgn-swap/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/gmgnai-gmgn-swap?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/gmgnai-gmgn-swap?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/gmgnai-gmgn-swap/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/gmgnai-gmgn-swap.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
gmgnai. (2026). gmgn-swap security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/gmgnai-gmgn-swap/audits/1BibTeX 引用
@techreport{gmgnai-gmgnai-gmgn-swap-2026,
author = {gmgnai},
title = {gmgn-swap security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/gmgnai-gmgn-swap/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gmgn-swap security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "gmgnai"
date-released: "2026-09-05"
url: "https://skillstore.io/skills/gmgnai-gmgn-swap/audits/1"
identifiers:
- type: other
value: "skillstore:gmgnai-gmgn-swap:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 低 55
架构
85
可维护性
87
内容
65
社区
74
规范符合性
你能构建什么
Confirm a Single Swap
Prepare a quoted token swap, review resolved addresses and fees, then submit after explicit approval.
Manage Exit Strategies
Create and monitor take-profit, stop-loss, or trailing orders for an existing token position.
Coordinate Wallet Batches
Prepare consistent trades across several linked wallets while preserving per-wallet amounts and results.
试试这些提示
Request a Read-Only Quote
Quote swapping [amount] [input token] to [output token] on [chain] from [wallet]. Do not submit a transaction.
Prepare a Confirmed Swap
Prepare a swap of [amount] [input token] for [output token] on [chain]. Validate addresses, run safety checks, and show confirmation first.
Create a Protected Exit
Prepare a [take-profit or stop-loss] order for [token] on [chain] at [trigger]. Show amount, slippage, fees, and expiry before submission.
Plan a Multi-Wallet Strategy
Prepare a multi-wallet swap on [chain] using these wallets and amounts: [details]. Add [conditions], validate every address, and require final confirmation.
最佳实践
- Verify contract addresses independently and complete token safety checks before every purchase.
- Review chain, wallet, smallest-unit conversion, slippage, fees, and expected output before confirming.
- Use small test amounts, anti-MEV protection where supported, and fresh approval for every transaction.
避免
- Do not send API keys or private keys through chat, command arguments, logs, or screenshots.
- Do not identify tokens by name alone or skip contract verification because a trade is urgent.
- Do not enable unattended trade submission or retry failed transactions without renewed confirmation.
常见问题
Does this skill move real funds?
Yes. Swap and strategy creation commands can authorize irreversible blockchain transactions after confirmation.
Which credentials are required?
An API key is required. Swap and most strategy operations also require the private key linked to the wallet.
Can it find a token from its name?
No. Provide and independently verify the token contract address before preparing a trade.
Which networks are supported?
The documentation covers Solana, BSC, Base, Ethereum, Robinhood, Arc, and Stable, with feature differences between networks.
Can it trade across multiple wallets?
Yes. Multi-swap supports up to 100 wallets that are already bound to the GMGN API key.
Can a completed swap be reversed?
No. Confirmed blockchain transactions are irreversible, so review every parameter and expected cost before approval.
开发者详情
作者
gmgnai许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
仓库
https://github.com/gmgnai/gmgn-skills/tree/aa4d29a9b7d1aaaac3d6acd72c13f17575605348/skills/gmgn-swap引用
e5464e662405de6361fdde6b984f9ea865635f64
维护新鲜度
2026/9/8
使用量
1 次下载 · 0 次浏览
文件结构
📄 SKILL.md
gmgnai 的更多技能
查看全部📦
gmgn-token-buy
38Prepare a Vetted GMGN Token Buy
Buying by token name can select a copycat or create unsafe order parameters. This skill resolves the contract, screens risks, and prepares a confirmed order card.
数据与分析 查看
📦
gmgn-token
38Research Crypto Tokens with GMGN
Token research requires combining market, holder, trader, and contract data. This skill queries GMGN and presents structured due diligence across supported chains.
研究与学习 查看
相关技能
查看全部📦
cryptofeed
75构建 Cryptofeed 市场数据管道
由 2025Emma
当交易所使用不同的数据源和格式时，加密货币市场数据工作会变得很困难。此技能会指导 Claude、Codex 和 Claude Code 完成 Cryptofeed 设置、回调、频道和后端选择。
数据与分析 查看
📦
Coingecko Skill
71构建 CoinGecko API 集成
由 2025Emma
加密货币数据集成需要准确的端点、认证和 SDK 指南。此技能为 Claude、Codex 和 Claude Code 工作流提供 CoinGecko 参考资料。
数据与分析 查看
📦
Ccxt Skill
70构建 CCXT 交易所集成
由 2025Emma
CCXT 开发需要谨慎处理交易所能力、速率限制、凭证和订单语义。此技能为 Claude 和 Codex 提供聚焦的参考指导，以便更安全地实现和排查问题。
编码与开发 查看
📦
near-intents
38构建 NEAR Intents 兑换集成
由 internet-court
跨链兑换集成需要谨慎处理报价、充值和状态。此技能为 Claude、Codex 和 Claude Code 提供专注于 NEAR Intents 1Click 的指导。
编码与开发 查看
📦
aimpact-crypto
38Generate Ranked Crypto News Briefings
由 me-news
Crypto news is fragmented and difficult to review quickly. This skill collects configured feeds, ranks relevant items, and formats concise Chinese briefings.
研究与学习 查看
📦
okx-dex-market
38Analyze On-Chain DEX Markets and Signals
由 okx
DEX research often requires several data sources and command formats. This skill routes read-only market, token, wallet, social, and live signal queries through Onchain OS.
数据与分析 查看