gate-exchange-kyc

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads official gate-cli binaries and release archives from the vendor's GitHub repository (github.com/gate/gate-cli). These downloads include checksum verification to ensure file integrity.
  • [COMMAND_EXECUTION]: The setup.sh script automates the installation of the vendor's CLI tool. It detects the operating system and architecture to fetch the appropriate binary.
  • [PRIVILEGE_ESCALATION]: The setup.sh installation script attempts to install the binary to a local user directory ($HOME/.openclaw/skills/bin) by default. It only requests sudo privileges to install to /usr/local/bin if the local installation fails, which is a standard behavior for system-wide CLI utilities.
  • [CREDENTIALS_SAFE]: The skill provides instructions for managing API keys (GATE_API_KEY, GATE_API_SECRET) using the vendor's configuration wizard (gate-cli config init). It explicitly warns against asking users to share secrets directly in the chat environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 03:51 PM