gate-exchange-referral
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the AI agent to execute a local shell script (setup.sh) to install the required gate-cli binary if it is missing from the environment.
- [EXTERNAL_DOWNLOADS]: The setup.sh script and skill metadata reference binary releases and checksum verification files hosted on the official gate/gate-cli GitHub repository. These are vendor-owned resources corresponding to the skill's author.
- [PRIVILEGE_ESCALATION]: The setup.sh script contains logic to utilize sudo to install the gate-cli binary into /usr/local/bin as a fallback if the preferred user-local directory is not writable, which poses a risk of unauthorized privilege elevation when executed by an agent.
Recommendations
- AI detected serious security threats
Audit Metadata