gate-exchange-kyc
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads official
gate-clibinaries and release archives from the vendor's GitHub repository (github.com/gate/gate-cli). These downloads include checksum verification to ensure file integrity. - [COMMAND_EXECUTION]: The
setup.shscript automates the installation of the vendor's CLI tool. It detects the operating system and architecture to fetch the appropriate binary. - [PRIVILEGE_ESCALATION]: The
setup.shinstallation script attempts to install the binary to a local user directory ($HOME/.openclaw/skills/bin) by default. It only requestssudoprivileges to install to/usr/local/binif the local installation fails, which is a standard behavior for system-wide CLI utilities. - [CREDENTIALS_SAFE]: The skill provides instructions for managing API keys (
GATE_API_KEY,GATE_API_SECRET) using the vendor's configuration wizard (gate-cli config init). It explicitly warns against asking users to share secrets directly in the chat environment.
Audit Metadata