gate-exchange-smallbalance
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the official
gate-clibinary from the vendor's GitHub repository (github.com/gate/gate-cli) during the installation process as defined in the skill metadata and thesetup.shscript.- [COMMAND_EXECUTION]: The skill executesgate-clicommands to interact with the Gate exchange API for listing balances, performing conversions, and viewing history.- [PRIVILEGE_ESCALATION]: Thesetup.shscript includes logic to usesudofor installing the binary to/usr/local/binif the user-local installation directory is not writable.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses viagate-clioutput. It mitigates potential injection by using structured reporting templates and requiring explicit validation of currencies against the eligible list before performing operations.
Audit Metadata