gate-exchange-coupon

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the official gate-cli binary and checksums from the Gate GitHub repository to enable coupon query functionality. The setup.sh script also downloads release metadata from the GitHub API to resolve the latest version.
  • [COMMAND_EXECUTION]: Executes the gate-cli tool for account-specific queries, such as listing coupons and fetching details. Additionally, it invokes python3 to convert Unix timestamps into human-readable UTC strings for display.
  • [PRIVILEGE_ESCALATION]: The setup.sh installation script may utilize sudo install as a fallback to move the CLI binary into /usr/local/bin if the local user directory is not writable.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and displays external data (coupon names, sources, and usage rules) returned by the Gate Exchange API, which could potentially contain adversarial instructions designed to influence the agent.
  • Ingestion points: Data returned from gate-cli cex coupon list and gate-cli cex coupon detail as processed in the references/ modules.
  • Boundary markers: None identified for prompt interpolation.
  • Capability inventory: Read-only gate-cli operations and local Python-based timestamp formatting.
  • Sanitization: Implements status code mapping and specific formatting logic for different data types to ensure consistent rendering.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:04 AM