gate-exchange-crossex
Warn
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The included
setup.shscript attempts to install thegate-clibinary usingsudo installif the primary local installation path is not writable. - [DYNAMIC_EXECUTION]: The skill defines an auto-update rule in
references/runtime-rules.mdthat allows it to check for and replace its own code from a remote repository on GitHub. - [EXTERNAL_DOWNLOADS]: The skill configuration and installation script download binary executables from the author's GitHub repository (
gate/gate-cli). - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external cryptocurrency exchanges, including symbol metadata and trade history, and uses this data to drive subsequent trading actions.
- Ingestion points: Data provided by external exchanges via
gate-cliqueries for symbols, history, and account details. - Boundary markers: The instructions do not define delimiters or warnings to prevent the agent from following instructions potentially embedded in external data.
- Capability inventory: The skill has broad capabilities including order creation, fund transfers, and position closures.
- Sanitization: There is no explicit logic described for sanitizing or validating external exchange strings before they are processed by the agent.
Audit Metadata