gate-exchange-flashswap-assistant

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the gate-cli tool from the official Gate GitHub repository during installation. These downloads are from a trusted organization and are intended for the skill's primary functionality.
  • [COMMAND_EXECUTION]: The skill uses gate-cli to perform exchange operations such as balance checks, swap previews, and order creation. The workflow is strictly controlled, requiring the agent to present a quote and obtain explicit user confirmation before any financial transaction is initiated.
  • [PRIVILEGE_ESCALATION]: The provided setup.sh script includes a fallback mechanism that uses sudo to install the gate-cli binary to a system directory if local installation is unavailable. This is a standard installation pattern for system-wide CLI tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts user-defined asset names and amounts as input for exchange operations, creating a surface for indirect injection.
  • Ingestion points: User requests containing currency symbols and swap amounts.
  • Boundary markers: The instructions mandate an "Action Draft" step where the agent must present the transaction details and wait for a "Y" or "N" response from the user.
  • Capability inventory: The skill has the capability to query account balances and execute trade orders via the gate-cli binary.
  • Sanitization: The skill relies on manual user verification of the transaction details in the Action Draft before any write command is executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:04 AM