gate-exchange-spot

The fragment is primarily documentation for a trading skill and does not itself demonstrate malware. Its documented confirmation guardrail reduces accidental trading risk. However, the default installation uses `curl | sh` to execute a remotely fetched installer and copies an executable into a persistent path, creating a meaningful software supply-chain risk. The actual setup script, installer, and gate-cli binary should be independently reviewed and preferably verified using pinned versions, checksums, or signatures before use.