The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The setup.sh script and skill metadata facilitate the download of the gate-cli binary from the official Gate GitHub repository. The script includes a security best practice by attempting to verify the downloaded binary against a checksums.txt file using sha256sum or shasum before extraction.
Evidence: setup.sh downloads from https://github.com/gate/gate-cli/releases/download/${VERSION}/${ARCHIVE}.
[PRIVILEGE_ESCALATION]: The installation script setup.sh utilizes sudo install to move the downloaded binary into /usr/local/bin if the primary installation path (~/.openclaw/skills/bin) is inaccessible. This requires the agent to have administrative privileges during the installation phase.
Evidence: sudo install -m 755 "${TMP}/${BINARY}" "${dir}/${BINARY}" in setup.sh.
[COMMAND_EXECUTION]: The skill relies on executing gate-cli shell commands to interact with the Gate exchange. These execution operations (stake/redeem) are protected by mandatory instructions requiring explicit user confirmation before any state-changing command is run.
Evidence: Usage of gate-cli cex earn staking swap, assets, awards, etc., throughout SKILL.md and reference files.
[INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from external API endpoints (via gate-cli) and incorporates it into the agent's context. A malicious actor who could influence the staking product names or metadata on the exchange could theoretically attempt to inject instructions.
Ingestion points: Outputs from gate-cli cex earn staking find, assets, awards, and orders processed in references/staking-assets.md, references/staking-coins.md, and references/staking-list.md.
Boundary markers: The instructions lack explicit delimitation (like XML tags or clear "ignore instructions" warnings) for content parsed from the API.
Capability inventory: The skill has the capability to execute financial transactions (staking/redeeming) through gate-cli cex earn staking swap.
Sanitization: No specific sanitization of the data returned by the CLI is performed before it is processed by the model.

gate-exchange-staking