gate-dex-trade-cli

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the gate-dex binary from gate-dex-cli.gateweb3.cc during the setup process. This domain is managed by the skill's vendor (Gate) and the download is a requirement for the skill's functionality. The installation is performed by the setup.sh script or via the install block in the skill metadata.\n- [COMMAND_EXECUTION]: The skill operates by executing subcommands of the gate-dex binary. All operations that modify state or broadcast transactions (such as swap) are gated behind mandatory instructions requiring the agent to obtain explicit user confirmation after displaying a transaction preview (quote).\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data including token symbols, contract addresses, and transaction route paths obtained from the DEX. \n
  • Ingestion points: Token symbols and addresses in swap-tokens search results and quote output.\n
  • Boundary markers: The skill uses a structured 'Swap Confirmation Template' to present data to the user, effectively isolating the transaction parameters for review.\n
  • Capability inventory: The skill can execute transaction signing and broadcasting via the gate-dex swap command.\n
  • Sanitization: The agent is instructed to verify resolved token addresses with the user and recommend security audits (token-risk) for unfamiliar tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:04 AM