gate-exchange-activitycenter
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
gate-clibinary from the vendor's official GitHub repository (github.com/gate/gate-cli) during the setup process. Thesetup.shscript also dynamically fetches the latest release version from the GitHub API. - [COMMAND_EXECUTION]: The skill executes the
gate-clibinary via subprocess calls to perform read-only operations such as listing activities, fetching entry details, and querying activity types. It implements a safety protocol of running--helpbefore subcommands to identify and satisfy required arguments. - [PRIVILEGE_ESCALATION]: The
setup.shinstallation script utilizessudo installas a fallback mechanism to install the binary into/usr/local/binif the preferred local user directory is unavailable. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the Gate Exchange API via the
gate-cli cex activity listcommand, which could potentially contain malicious instructions in activity metadata. - Ingestion points: Data enters the context through
gate-cli cex activity listandgate-cli cex activity get-entryas specified inSKILL.md. - Boundary markers: The skill enforces strict response templates and Markdown table structures to isolate external content.
- Capability inventory: The skill is limited to read-only shell execution of the
gate-clitool. - Sanitization:
SKILL.mdmandates strict field mapping, translation of non-English keywords, and explicit URL processing rules to ensure data integrity.
Audit Metadata