gate-dex-market-cli

Fail

Audited by Snyk on Sep 19, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (critical risk: 1.00). The skill installs software from gateweb3.cc, which impersonates Gate.io (gate.io) using a deceptive lookalike domain to distribute unauthorized binaries.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (medium risk: 0.30). The setup script downloads a binary from https://gate-dex-cli.gateweb3.cc/latest/gate-dex-linux-x64 using curl and executes it, constituting an operational third-party dependency from an unofficial publisher domain.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 19, 2026, 09:03 AM
Issues
2