gate-exchange-smallbalance

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the official gate-cli binary from the vendor's GitHub repository (github.com/gate/gate-cli) during the installation process as defined in the skill metadata and the setup.sh script.- [COMMAND_EXECUTION]: The skill executes gate-cli commands to interact with the Gate exchange API for listing balances, performing conversions, and viewing history.- [PRIVILEGE_ESCALATION]: The setup.sh script includes logic to use sudo for installing the binary to /usr/local/bin if the user-local installation directory is not writable.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses via gate-cli output. It mitigates potential injection by using structured reporting templates and requiring explicit validation of currencies against the eligible list before performing operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:04 AM