gate-exchange-earn
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a specialized command-line tool,
gate-cli, to manage earn products. It enforces a strict security policy requiring an 'Action Draft' and explicit user confirmation (Y/N) before executing any transaction-related commands.- [EXTERNAL_DOWNLOADS]: The skill includes an installation script,setup.sh, and metadata-driven download links that fetch thegate-clibinary from the official Gate GitHub repository. The installation process incorporates checksum verification to ensure file integrity.- [CREDENTIALS_SAFE]: Instructions for handling API keys follow security best practices by utilizing environment variables and a local configuration wizard. The skill proactively warns users against entering sensitive credentials directly into the chat.- [INDIRECT_PROMPT_INJECTION]: Robust guardrails are in place to handle data ingested from the exchange API, including clear workflow steps that separate data retrieval from execution and mandate human-in-the-loop confirmation for all sensitive actions.
Audit Metadata