The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the gate-cli binary from the official Gate GitHub repository (github.com/gate/gate-cli) via the setup.sh script and SKILL.md metadata. As this originates from a trusted vendor repository, the download is documented as a safe vendor-provided resource.
[REMOTE_CODE_EXECUTION]: The skill is designed to execute the gate-cli binary to interact with the exchange. The binary is sourced from a trusted vendor repository and its execution is the primary purpose of the skill.
[COMMAND_EXECUTION]: The skill uses shell commands to interact with gate-cli. The instructions in SKILL.md specify a resolution order for the binary path and include verification steps using command -v gate-cli and gate-cli --version.
[PRIVILEGE_ESCALATION]: The setup.sh script utilizes sudo install to place the gate-cli binary in /usr/local/bin if local installation is not possible. This is a standard installation pattern for command-line tools and is consistent with the skill's setup requirements.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-defined inputs for financial transactions, creating an injection surface.
Ingestion points: Untrusted data enters the context through user-provided strike prices, sizes, and underlying assets in references/place-order.md and references/close-position.md.
Boundary markers: Explicit delimiter boundaries are absent in the prompts.
Capability inventory: The skill can create, amend, and cancel exchange orders via the gate-cli tools.
Sanitization: The skill mitigates risks through a mandatory resolution workflow that validates all user-provided parameters against the exchange API (e.g., resolving a strike to a specific contract ID) and requires explicit user confirmation before any authenticated action is performed.

gate-exchange-options