gate-exchange-pay
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes merchant order data including order IDs, amounts, and currencies which may originate from untrusted external sources like payment-required merchant pages.
- Ingestion points: Data is extracted from user prompts and the conversation context as described in SKILL.md and README.md.
- Boundary markers: The skill enforces verification steps and explicit intent confirmation before execution to mitigate accidental or malicious triggering.
- Capability inventory: The skill possesses the capability to execute financial charges via the
cex_pay_create_ai_order_paytool. - Sanitization: No specific input sanitization or filtering logic for the externally-sourced order parameters is documented.
- [PRIVILEGE_ESCALATION]: The
setup.shinstallation script attempts to usesudo installto place thegate-clibinary in/usr/local/binif the local user-level installation fails. - [EXTERNAL_DOWNLOADS]: The skill fetches the
gate-clibinary from the vendor's official GitHub repository during the setup process. - [COMMAND_EXECUTION]: The skill executes the
gate-clitool to perform payment actions and version checks.
Audit Metadata