gate-exchange-flashswap
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill and its included setup.sh script facilitate the download of the gate-cli binary and checksums from the author's official GitHub repository. These components are essential for the skill's operation.\n- [COMMAND_EXECUTION]: The agent is instructed to use the gate-cli tool to interact with the Gate Exchange API. This involves running various subcommands for market data queries and order execution.\n- [PRIVILEGE_ESCALATION]: The provided setup.sh script contains logic to use sudo for installing the binary into system-level directories if local installation is unavailable. This is a standard procedure for command-line tool installers.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied assets and amounts which are passed to CLI tools. To protect against malicious or unintended inputs, the skill implements a mandatory preview and confirmation workflow, ensuring the user verifies all transaction details before execution.\n- [PROMPT_INJECTION]: The core instructions include directives for the agent to retrieve and adhere to additional runtime rules hosted on a remote GitHub repository. These rules provide standardized operational guidelines for the vendor's suite of exchange skills.
Audit Metadata