The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill's setup.sh script downloads binary releases of gate-cli from https://github.com/gate/gate-cli/releases. While this is the vendor's repository, downloading and executing external binaries is a significant security consideration.
[PRIVILEGE_ESCALATION]: The setup.sh script includes a fallback installation mechanism that uses sudo install to move the gate-cli binary into /usr/local/bin if local installation fails.
[COMMAND_EXECUTION]: The skill executes multiple sensitive commands via gate-cli to perform financial transactions, including gate-cli cex futures order add, gate-cli cex futures order cancel, and gate-cli cex futures position update-leverage.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from the Gate API, which could be exploited if API responses (like order names or market metadata) contain malicious instructions.
Ingestion points: Data is fetched via gate-cli cex futures order list, gate-cli cex futures price-trigger list, and gate-cli cex futures market tickers.
Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the data retrieved from the API.
Capability inventory: The skill has high capabilities, including placing trades, canceling orders, and modifying margin/leverage settings via the CLI.
Sanitization: There is no evidence of explicit sanitization or validation of the API-returned data before it influences agent decision-making.

gate-exchange-futures