gate-cli-installer
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
setup.shscript downloads thegate-clibinary from the official GitHub repositorygithub.com/gate/gate-cli. This is consistent with the skill's purpose and the vendor context. It correctly implements checksum verification usingshasumorsha256sumwhen available. - [COMMAND_EXECUTION]: The skill executes shell commands to install the binary. It attempts to install to
~/.local/binfirst and falls back to/usr/local/binusingsudoonly if the local directory is not writable. This follows the principle of least privilege. - [CREDENTIALS_SAFE]: The skill correctly instructs users to use
gate-cli config initfor sensitive API credentials rather than pasting them into the chat interface, which is a security best practice for AI agents.
Audit Metadata