gate-exchange-kyc
Warn
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The
setup.shscript usessudoto install thegate-clibinary to/usr/local/binif installation to the local user directory fails. - [EXTERNAL_DOWNLOADS]: Fetches binary archives from the official Gate repository on GitHub (
github.com/gate/gate-cli) as specified in the skill configuration andsetup.sh. - [COMMAND_EXECUTION]: Executes shell commands for binary installation (
install), version verification (gate-cli --version), and configuration initialization (gate-cli config init). - [INDIRECT_PROMPT_INJECTION]: The skill ingests user queries to determine routing for KYC requests, which introduces a potential surface for embedded instructions.
- Ingestion points: User input regarding identity verification or withdrawal issues is used to trigger the skill's workflows.
- Boundary markers: The skill contains clear instructions to only provide portal links and to explicitly reject document submissions in chat.
- Capability inventory: Utilizes the
gate-clitool for configuration tasks. - Sanitization: No specific sanitization methods are documented for handling user input within the guidance workflow.
Audit Metadata