Skills
Navigate
skills/gate/gate-skills/gate-exchange-vipfee/Gen Agent Trust Hub

gate-exchange-vipfee

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads gate-cli binaries directly from the vendor's GitHub releases (github.com/gate/gate-cli) during setup.
  • [COMMAND_EXECUTION]: The skill executes gate-cli subcommands such as cex account detail and cex wallet market trade-fee to retrieve user data.
  • [PRIVILEGE_ESCALATION]: The setup.sh script attempts to use sudo install to move the downloaded binary into /usr/local/bin if the local directory installation fails.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: Data ingested from Gate Exchange API outputs via the gate-cli tool (SKILL.md, references/gate-cli.md).
  • Boundary markers: Uses markdown tables for formatting results, but does not include explicit instructions to ignore potentially malicious content within API responses.
  • Capability inventory: Limited to read-only gate-cli commands for account and fee queries.
  • Sanitization: None specified for the API output data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:03 AM