The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The setup.sh installation script utilizes the sudo install command as a fallback to place the gate-cli binary into /usr/local/bin if the initial attempt to install it to the local home directory ($HOME/.local/bin) fails.
[EXTERNAL_DOWNLOADS]: The skill downloads the gate-cli tool from the vendor's official GitHub repository (github.com/gate/gate-cli) during its installation process, which is documented in the SKILL.md metadata and executed via the provided setup.sh script.
[COMMAND_EXECUTION]: The workflow documentation in references/autoinvest-plans.md instructs the agent to execute shell commands such as date +"%Z %z" to programmatically detect the user's system timezone for UTC conversion logic.
[INDIRECT_PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by interpolating user-provided inputs, such as investment amounts and coin symbols, directly into shell-based gate-cli command arguments. To mitigate this risk, the skill enforces mandatory confirmation turns for all write operations and performs range validation against external tool outputs.
Ingestion points: User-supplied parameters for plan creation and updates (e.g., amount, target coins, cadence) in SKILL.md and references/autoinvest-plans.md.
Boundary markers: None explicitly defined for user input interpolation.
Capability inventory: Comprehensive suite of gate-cli commands for financial transactions (create, update, stop, add-position) and system command execution for timezone detection.
Sanitization: Validation of user inputs against the outputs of read-only tools like min-amount, config, and coins before proceeding with write operations.

gate-exchange-autoinvest