The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the gate-cli binary from the official Gate GitHub repository (github.com/gate/gate-cli) as specified in the SKILL.md frontmatter and the setup.sh script.
[PRIVILEGE_ESCALATION]: The setup.sh script includes a fallback mechanism that uses sudo install to place the gate-cli binary in /usr/local/bin if the local user directory ($HOME/.openclaw/skills/bin) is not writable. This is standard installation behavior for system-wide CLI tools.
[COMMAND_EXECUTION]: The skill executes gate-cli commands to interact with the Gate Exchange Partner APIs. These commands are restricted to read-only operations such as cex rebate partner commissions and cex rebate partner transactions.
[INDIRECT_PROMPT_INJECTION]: The skill processes data returned from external API endpoints (referred users' trading and commission records). While this represents a potential ingestion surface for untrusted content, the risk is mitigated by the structured nature of the API responses and the skill's specific aggregation logic.
[SAFE]: All external URLs and dependencies belong to the authorized vendor ('gate') or trusted platforms like GitHub. The skill uses standard secret management practices, instructing users to configure API keys via environment variables or the gate-cli config init command rather than pasting them into chat.

gate-exchange-affiliate