gate-exchange-pay

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes merchant order data including order IDs, amounts, and currencies which may originate from untrusted external sources like payment-required merchant pages.
  • Ingestion points: Data is extracted from user prompts and the conversation context as described in SKILL.md and README.md.
  • Boundary markers: The skill enforces verification steps and explicit intent confirmation before execution to mitigate accidental or malicious triggering.
  • Capability inventory: The skill possesses the capability to execute financial charges via the cex_pay_create_ai_order_pay tool.
  • Sanitization: No specific input sanitization or filtering logic for the externally-sourced order parameters is documented.
  • [PRIVILEGE_ESCALATION]: The setup.sh installation script attempts to use sudo install to place the gate-cli binary in /usr/local/bin if the local user-level installation fails.
  • [EXTERNAL_DOWNLOADS]: The skill fetches the gate-cli binary from the vendor's official GitHub repository during the setup process.
  • [COMMAND_EXECUTION]: The skill executes the gate-cli tool to perform payment actions and version checks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:04 AM