gate-dex-trade-cli
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
gate-dexbinary fromgate-dex-cli.gateweb3.ccduring the setup process. This domain is managed by the skill's vendor (Gate) and the download is a requirement for the skill's functionality. The installation is performed by thesetup.shscript or via theinstallblock in the skill metadata.\n- [COMMAND_EXECUTION]: The skill operates by executing subcommands of thegate-dexbinary. All operations that modify state or broadcast transactions (such asswap) are gated behind mandatory instructions requiring the agent to obtain explicit user confirmation after displaying a transaction preview (quote).\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data including token symbols, contract addresses, and transaction route paths obtained from the DEX. \n - Ingestion points: Token symbols and addresses in
swap-tokenssearch results andquoteoutput.\n - Boundary markers: The skill uses a structured 'Swap Confirmation Template' to present data to the user, effectively isolating the transaction parameters for review.\n
- Capability inventory: The skill can execute transaction signing and broadcasting via the
gate-dex swapcommand.\n - Sanitization: The agent is instructed to verify resolved token addresses with the user and recommend security audits (
token-risk) for unfamiliar tokens.
Audit Metadata