gate-exchange-unified
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The
setup.shinstallation script attempts to acquire administrative privileges by usingsudo installto place thegate-clibinary into/usr/local/binif user-level directory installation fails. This allows the skill to perform operations with root-level access on the host system during setup. - [EXTERNAL_DOWNLOADS]: The skill fetches the
gate-clibinary from the official vendor repository atgithub.com/gate/gate-cliduring the installation process defined insetup.shand theSKILL.mdfrontmatter. This is part of the required toolchain setup for the skill to function. - [COMMAND_EXECUTION]: The skill executes the
gate-clibinary using shell commands to perform financial operations on the Gate exchange. The resolution of this binary follows a specific search order on the host filesystem as defined inSKILL.mdandgate-runtime-rules.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data returned from external API responses via the
gate-clitool. - Ingestion points: Data enters the agent's context through command outputs from tools like
get_unified_accountsandlist_unified_loan_records. - Boundary markers: A mandatory confirmation gate is enforced; the agent must present an "Action Draft" and receive explicit user confirmation before executing any mutation command.
- Capability inventory: The skill has capabilities to execute shell commands (
gate-cli) and perform account modifications (borrowing, repayment, and configuration changes). - Sanitization: The skill instructions mandate exact preservation of API numeric strings and manual review via human-in-the-loop confirmation steps for all high-risk operations.
Recommendations
- AI detected serious security threats
Audit Metadata