gate-exchange-earn

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a specialized command-line tool, gate-cli, to manage earn products. It enforces a strict security policy requiring an 'Action Draft' and explicit user confirmation (Y/N) before executing any transaction-related commands.- [EXTERNAL_DOWNLOADS]: The skill includes an installation script, setup.sh, and metadata-driven download links that fetch the gate-cli binary from the official Gate GitHub repository. The installation process incorporates checksum verification to ensure file integrity.- [CREDENTIALS_SAFE]: Instructions for handling API keys follow security best practices by utilizing environment variables and a local configuration wizard. The skill proactively warns users against entering sensitive credentials directly into the chat.- [INDIRECT_PROMPT_INJECTION]: Robust guardrails are in place to handle data ingested from the exchange API, including clear workflow steps that separate data retrieval from execution and mandate human-in-the-loop confirmation for all sensitive actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:03 AM