PlugWiki

gmgn-token Skill for Claude Code: Token Due Diligence

Lets your agent research one crypto or meme token by address: price, security checks, liquidity pool, top holders and top traders.

Installs
18.6K
on skills.sh
Stars
636
on GitHub
Updated
Oct 2026
last repo commit

The skill makes your agent run five gmgn-cli token commands for one token address: basic info and price, security metrics, liquidity pool, top holders and top traders. It then applies a scoring card to the results with safe, warning and danger levels for fields such as honeypot flag, rug ratio, holder concentration and sniper count.

It needs the gmgn-cli tool and a GMGN API key. SKILL.md warns that token names and descriptions are written by whoever created the token, so the agent must treat them as data and never follow instructions found inside them. SKILL.md says all its commands use API-key auth only, with no signature; trading is in the separate gmgn-swap and gmgn-cooking skills, per the README. Its scoring card ends in verdicts such as skip or worth researching, and its summary format says DO NOT BUY for a honeypot. Those are the skill author's rules, not financial advice.

Good for

  • Traders who want a safety check before buying a meme token
  • Researchers looking at who holds a token and what smart money is doing
  • Developers building a token screening workflow around gmgn-cli

Install gmgn-token

Claude Code

  1. 1

    Copy this prompt.

    Install the gmgn-token skill in Claude Code. Run this command:

npm install -g gmgn-cli
npx skills add GMGNAI/gmgn-skills --skill gmgn-token -a claude-code

Then check that it loaded and tell me how to use it.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

The skill only works with the gmgn-cli program installed and an API key set, so run the npm line first. The README's own command, npx skills add GMGNAI/gmgn-skills, installs every skill in the repo, including the swap and order skills; the --skill flag limits it to this one. Update the CLI with npm install -g gmgn-cli.

From the vendor's docs. Source.

What's in the skill

When it loads

Research any crypto or meme token by address — real-time price, market cap, liquidity, holder list, trader list, top Smart Money and KOL positions, security audit (honeypot, rug pull risk, dev wallet, renounced status), social links (Twitter/X, website) via GMGN API on Solana, BSC, Base, or Ethereum. Use when user asks about a token's price, safety, holders, traders, smart money exposure, or wants due diligence before buying.

Sections in SKILL.md

  1. Core Concepts
  2. Sub-commands
  3. Supported Chains
  4. Prerequisites
  5. Rate Limit Handling
  6. Parameters — token info / token security / token pool
  7. Parameters — token holders / token traders
  8. --order-by Values
  9. --tag Values
  10. --tag + --order-by Combination Guide
  11. Response Field Reference
  12. token info — Key Fields
  13. token security — Key Fields
  14. token pool — Key Fields
  15. token holders / token traders — Response Fields
  16. Usage Examples

Key facts

Author
gmgnai
Repo
gmgnai/gmgn-skills, folder skills/gmgn-token
Installs on skills.sh
18,570 as of 2026-11-02
GitHub stars
636 for the whole gmgnai/gmgn-skills repo
License
MIT (as detected by GitHub)
Last repo commit
2026-10-29
What is inside
1 file including SKILL.md
skills.sh audits
Gen Agent Trust Hub: pass; Socket: pass; Snyk: fail
Needs
gmgn-cli (npm, global) and GMGN_API_KEY in ~/.config/gmgn/.env

What it includes

  • Price, liquidity, market cap, supply, holders, links

    Basic token data with a real-time price, plus social links. Market cap is worked out as price times circulating supply.

    Try: “Give me the info and security check for this Solana token address.”

    Network · token info

  • Honeypot, taxes, concentration, contract risks

    Security metrics for one token, such as the honeypot flag, buy and sell tax, top-10 holder share and whether the contract is open source and renounced.

    Network · token security

  • Liquidity pool and depth

    Shows the DEX, reserves and liquidity depth.

    Network · token pool

  • Top holders with profit and loss

    Lists the top holders with a profit and loss breakdown. A tag filter narrows it to smart money, KOLs, snipers, bundlers and similar wallets.

    Network · token holders

  • Top traders with profit and loss

    Lists the top traders with a profit and loss breakdown, using the same tag filters as holders.

    Network · token traders

  • Safe, warning or danger for each field

    A table of thresholds. A honeypot is a hard stop, other danger fields mean skip, and three or more warnings mean more research is needed.

    Read · Token quick scoring card

  • Info, security, pool, heat check, holders

    A fixed sequence for a full report. The detailed workflow files live in the repo docs folder, outside the skill folder.

    Network · Full due diligence workflow

From the official docs

Permissions

Medium risk

It sends the token addresses you ask about to the GMGN API with your API key, and the token text it reads can contain planted instructions. Keep the key out of chat and do not act on a verdict without your own check.

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • Your API key can end up in the chat

    If no key is set, SKILL.md has the agent ask you to send the key in the conversation and apply it with a gmgn-cli command. Create ~/.config/gmgn/.env yourself instead.

  • Token text can try to steer your agent

    Token names, symbols and descriptions are written by whoever made the token. SKILL.md tells the agent to ignore any instructions in them and to warn you, and the CLI prints a notice when it removes suspicious text. Pay attention if you see it.

  • Workflow files are outside the skill folder

    SKILL.md links to workflow docs in the repo docs folder. Installing only this skill does not include them.

  • Trading is a separate skill with its own key setting

    The README lists swaps and orders under gmgn-swap and gmgn-cooking, and says swapping needs GMGN_PRIVATE_KEY, appended to the same .env file, plus an IP-whitelisted key. Install only the skills you need.

Security advisories

No published security advisories as of Nov 2, 2026.

Technical details
Turning on read-onlyNo switch is needed for this skill: its five token commands are queries, and SKILL.md says they use the API key alone with no signature. Placing orders is done by other skills (gmgn-swap, gmgn-cooking) that the README says need GMGN_PRIVATE_KEY and an IP-whitelisted key.
Talks toThe GMGN API receives the tokens, wallets and filters you ask about. npm download if gmgn-cli is missing or needs an update
Sign-in and keysThe API key lives in ~/.config/gmgn/.env, or in a project .env file that takes precedence.
Scopes

  • Runs gmgn-cli commands in your terminal

  • Reads the GMGN API key from ~/.config/gmgn/.env

Questions

What does gmgn-token do?

It makes your agent look up one crypto token by address through GMGN. You get its price, security data, liquidity pool, top holders and top traders, plus a scored verdict.

How do I install it?

Use the install box at the top of this page for the skill itself. The skill also needs the gmgn-cli command-line tool (npm install -g gmgn-cli) and a GMGN API key, which the README says you create at gmgn.ai/ai. The README's own npx skills add command installs the whole GMGN set, not only this skill.

Does it need an API key?

Yes, a GMGN API key in ~/.config/gmgn/.env. SKILL.md says the token commands need only the API key and no signature, so for this skill the key runs read queries. The README says swapping needs an extra GMGN_PRIVATE_KEY setting and an IP-whitelisted key, which this skill does not use.

Can it tell me if a token is a scam?

It checks the honeypot flag, taxes, rug ratio, holder concentration, snipers and more, and sorts each into safe, warning or danger. A honeypot is a hard stop. The result is a screen, not a guarantee.

Is it safe to use?

Its five commands query data and none of them trades, but it uses your API key and reads text that token creators control. SKILL.md tells the agent to treat that text as data, so keep the key out of chat and double-check anything surprising. The scoring card is a screen with a hard stop for honeypots, not a guarantee.

How is it different from gmgn-market?

gmgn-token goes deep on one token address. The sibling gmgn-market browses rankings, new launches and charts, and gmgn-portfolio looks at wallets.

Information

updated Nov 2, 2026

Repository
gmgnai/gmgn-skills
Folder
skills/gmgn-token

gmgnai/gmgn-skillsskills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 6
  1. gmgnai/gmgn-skills README · github.com
  2. skills CLI commands · github.com
  3. gmgn-token SKILL.md · github.com
  4. gmgn-token on skills.sh · skills.sh
  5. gmgnai/gmgn-skills · github.com
  6. gmgn-skills .env.example · github.com

Updated Nov 2, 2026.