The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the gate-cli binary from the official Gate GitHub repository during installation. These downloads target specific releases (v0.6.2) for Linux and macOS architectures.
[COMMAND_EXECUTION]: The skill interacts with the host system by executing gate-cli commands. It uses read-only commands for ledger verification and a specific write command (gate-cli cex wallet transfer create) to perform fund transfers.
[PRIVILEGE_ESCALATION]: The setup.sh installation script attempts to install the CLI binary to a local user directory (~/.openclaw/skills/bin). If local installation fails, it includes a fallback mechanism that uses sudo to install the binary into /usr/local/bin.
[INDIRECT_PROMPT_INJECTION]: The skill processes natural language user requests to extract transfer parameters (asset, amount, source, and destination). To mitigate potential injection risks from untrusted user input:
Ingestion points: Natural language prompts in SKILL.md and references/scenarios.md (e.g., "Transfer 1000 USDT from spot to futures").
Boundary markers: The skill mandates the presentation of a structured Transfer Draft and requires an explicit, single-use confirmation from the user before proceeding with any API call.
Capability inventory: The skill is restricted to internal account-to-account transfers and read-only balance queries via gate-cli.
Sanitization: Input is validated against a strict "Four Elements" schema (From, To, Currency, Amount) and verified against actual account balances before execution.

gate-exchange-transfer