gate-exchange-crossex

Warn

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: MEDIUMPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The included setup.sh script attempts to install the gate-cli binary using sudo install if the primary local installation path is not writable.
  • [DYNAMIC_EXECUTION]: The skill defines an auto-update rule in references/runtime-rules.md that allows it to check for and replace its own code from a remote repository on GitHub.
  • [EXTERNAL_DOWNLOADS]: The skill configuration and installation script download binary executables from the author's GitHub repository (gate/gate-cli).
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external cryptocurrency exchanges, including symbol metadata and trade history, and uses this data to drive subsequent trading actions.
  • Ingestion points: Data provided by external exchanges via gate-cli queries for symbols, history, and account details.
  • Boundary markers: The instructions do not define delimiters or warnings to prevent the agent from following instructions potentially embedded in external data.
  • Capability inventory: The skill has broad capabilities including order creation, fund transfers, and position closures.
  • Sanitization: There is no explicit logic described for sanitizing or validating external exchange strings before they are processed by the agent.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 19, 2026, 09:04 AM