gate-exchange-welfare
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official gate-cli binary releases from the Gate GitHub repository as part of the installation process.
- [PRIVILEGE_ESCALATION]: The setup.sh script attempts to use sudo to install the gate-cli binary into system-wide directories if the local user directory is unwritable.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and displays task descriptions from API responses, creating an injection surface. The skill mitigates this by instructing the agent to strip HTML tags from the descriptions to prevent code rendering or instruction bypass.
- [COMMAND_EXECUTION]: The skill executes the gate-cli tool locally to perform identity verification and welfare task management based on user intent.
Audit Metadata