The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads gate-cli binaries and checksum files from the official Gate repository on GitHub (github.com/gate/gate-cli/releases). These downloads are performed during the setup process triggered by SKILL.md and the setup.sh script.
[PRIVILEGE_ESCALATION]: The setup.sh installation script contains logic to use sudo install if the primary user-local installation path (~/.openclaw/skills/bin) is not writable, allowing the skill to write to protected system directories like /usr/local/bin.
[COMMAND_EXECUTION]: The skill makes extensive use of shell command execution to invoke various subcommands of the gate-cli tool (e.g., cex wallet balance total, cex spot account get) to retrieve financial data.
[DYNAMIC_EXECUTION]: The skill resolves the binary path for gate-cli at runtime using a prioritized search order across multiple directories, including system paths and user-local directories.
[INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided input, such as currency codes, and interpolates them directly into shell command arguments without explicit sanitization or escaping mechanisms.
Ingestion points: User-supplied currency names in queries (e.g., "How many {COIN} do I have?") handled in SKILL.md and scenarios.md.
Boundary markers: The skill specifies routing logic and read-only command mappings but lacks explicit delimiters or instructions to ignore embedded control characters in the user-supplied data.
Capability inventory: The agent has the ability to execute subprocesses through the gate-cli command-line utility.
Sanitization: No validation, regex filtering, or shell escaping is described for the interpolated {COIN} variable.

gate-exchange-assets