gate-exchange-flashswap-assistant
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the gate-cli tool from the official Gate GitHub repository during installation. These downloads are from a trusted organization and are intended for the skill's primary functionality.
- [COMMAND_EXECUTION]: The skill uses gate-cli to perform exchange operations such as balance checks, swap previews, and order creation. The workflow is strictly controlled, requiring the agent to present a quote and obtain explicit user confirmation before any financial transaction is initiated.
- [PRIVILEGE_ESCALATION]: The provided setup.sh script includes a fallback mechanism that uses sudo to install the gate-cli binary to a system directory if local installation is unavailable. This is a standard installation pattern for system-wide CLI tools.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-defined asset names and amounts as input for exchange operations, creating a surface for indirect injection.
- Ingestion points: User requests containing currency symbols and swap amounts.
- Boundary markers: The instructions mandate an "Action Draft" step where the agent must present the transaction details and wait for a "Y" or "N" response from the user.
- Capability inventory: The skill has the capability to query account balances and execute trade orders via the gate-cli binary.
- Sanitization: The skill relies on manual user verification of the transaction details in the Action Draft before any write command is executed.
Audit Metadata