gate-exchange-bot
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The
setup.shscript contains a fallback mechanism that attempts to executesudo installto place thegate-clibinary in/usr/local/binif the initial attempt at a user-local installation fails. - [EXTERNAL_DOWNLOADS]: The skill downloads the
gate-clibinary and its associated checksums from the official GitHub repository of the vendor during the setup process. The download sources are identified as belonging to the trusted vendor infrastructure. - [COMMAND_EXECUTION]: The skill relies on executing the
gate-clibinary to perform all exchange operations, including strategy recommendations, portfolio queries, and bot lifecycle management (create/stop). - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses, such as strategy recommendations and bot performance metrics, which could potentially contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: Data returned from
gate-cli cex bot strategy recommend,gate-cli cex bot portfolio running, andgate-cli cex bot portfolio detailas specified inreferences/list-running.mdandreferences/get-detail.md. - Boundary markers: The skill requires the agent to present an "Action Draft" or confirmation summary and wait for explicit user confirmation before executing any state-changing command (documented in
SKILL.mdandreferences/gate-cli.md). - Capability inventory: Includes network operations (via CLI), file system modifications (during installation), and execution of the exchange management tool.
- Sanitization: The instructions mandate the normalization of percentage-based inputs into decimal ratios and strict adherence to predefined JSON payload schemas for all bot creation actions.
Recommendations
- AI detected serious security threats
Audit Metadata