gate-exchange-assetswap
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the
gate-clibinary from the official Gate Exchange GitHub repository during the installation process. - [COMMAND_EXECUTION]: Executes
gate-clicommands to interact with Gate Exchange APIs for portfolio management, including listing assets, reading configurations, and submitting rebalancing orders. - [PRIVILEGE_ESCALATION]: The
setup.shinstallation script includes logic to usesudo installif the tool needs to be placed in system-wide directories like/usr/local/bin. - [INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as asset symbols and strategy parameters which are passed to CLI tools.
- Ingestion points: Asset symbols and strategy names provided in user prompts processed in
SKILL.mdsteps. - Boundary markers: Explicit user confirmation is requested after the preview stage in Step 5 before order creation.
- Capability inventory: Full suite of
gate-cliasset-swap commands including order creation, list, and status queries. - Sanitization: Relies on the underlying exchange API and CLI tool to validate and sanitize parameters.
Audit Metadata