gate-exchange-bot

Fail

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The setup.sh script contains a fallback mechanism that attempts to execute sudo install to place the gate-cli binary in /usr/local/bin if the initial attempt at a user-local installation fails.
  • [EXTERNAL_DOWNLOADS]: The skill downloads the gate-cli binary and its associated checksums from the official GitHub repository of the vendor during the setup process. The download sources are identified as belonging to the trusted vendor infrastructure.
  • [COMMAND_EXECUTION]: The skill relies on executing the gate-cli binary to perform all exchange operations, including strategy recommendations, portfolio queries, and bot lifecycle management (create/stop).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses, such as strategy recommendations and bot performance metrics, which could potentially contain malicious instructions intended to influence the agent's behavior.
  • Ingestion points: Data returned from gate-cli cex bot strategy recommend, gate-cli cex bot portfolio running, and gate-cli cex bot portfolio detail as specified in references/list-running.md and references/get-detail.md.
  • Boundary markers: The skill requires the agent to present an "Action Draft" or confirmation summary and wait for explicit user confirmation before executing any state-changing command (documented in SKILL.md and references/gate-cli.md).
  • Capability inventory: Includes network operations (via CLI), file system modifications (during installation), and execution of the exchange management tool.
  • Sanitization: The instructions mandate the normalization of percentage-based inputs into decimal ratios and strict adherence to predefined JSON payload schemas for all bot creation actions.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 19, 2026, 09:04 AM