gate-exchange-trading
Fail
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The setup.sh script included in the skill package contains logic to install the gate-cli binary using sudo install if a local installation to the user's home directory is not possible.
- [EXTERNAL_DOWNLOADS]: The skill downloads the gate-cli binary from the vendor's GitHub repository (github.com/gate/gate-cli). As this resource is provided by the skill's author (gate), it is considered a vendor-owned resource.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes data from external sources such as news search results and social media feeds (news_feed_search_news) to inform its Trading Brief and subsequent trade judgments, creating a potential surface for indirect prompt injection attacks.
- [COMMAND_EXECUTION]: The skill orchestrates multiple shell commands using the gate-cli binary to perform trading actions, account management, and market data retrieval.
Recommendations
- AI detected serious security threats
Audit Metadata