gate-dex-wallet

SUSPICIOUS: the skill is purpose-aligned and uses same-org Gate endpoints, so it does not look like credential harvesting or covert exfiltration. However, it enables autonomous crypto transfers, signing, and payments through remote MCP services, creating high real-world financial risk even with confirmation and check-in controls.

The fragment is payment-integration documentation, not malware code. It specifies a legitimate x402 wallet-payment workflow but describes high-impact behavior: arbitrary outbound requests and automatic cryptocurrency payment/signing based on remote 402 metadata. The documented safeguards reduce risk, but the actual implementation must enforce URL/network restrictions, recipient and amount validation, and explicit wallet confirmation. Assessment is limited because executable implementations and call sites are not visible.

This fragment documents a high-impact custodial crypto wallet workflow. It exposes legitimate but sensitive operations involving local credentials, remote APIs, custodial signing, and blockchain broadcasts. The required confirmation, preview, and MCP check-in controls reduce risk, but incorrect or compromised CLI/MCP implementations could move user funds. The fragment itself contains no clear malicious behavior or obfuscation.

No direct malware behavior or credential theft is evident in this fragment. The installer performs expected configuration and file-copy actions, but it introduces significant trust risk by registering hardcoded remote MCP endpoints and modifying AI-agent instruction files for authentication, trading, and transaction signing. The remote service and all installed skill content should be independently verified before use, especially for wallet operations.