gate-cli-installer

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The setup.sh script downloads the gate-cli binary from the official GitHub repository github.com/gate/gate-cli. This is consistent with the skill's purpose and the vendor context. It correctly implements checksum verification using shasum or sha256sum when available.
  • [COMMAND_EXECUTION]: The skill executes shell commands to install the binary. It attempts to install to ~/.local/bin first and falls back to /usr/local/bin using sudo only if the local directory is not writable. This follows the principle of least privilege.
  • [CREDENTIALS_SAFE]: The skill correctly instructs users to use gate-cli config init for sensitive API credentials rather than pasting them into the chat interface, which is a security best practice for AI agents.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:03 AM