gate-info-research
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes
scripts/update-skill.shandscripts/update-skill.ps1, which are utility scripts used to synchronize the local skill files with the vendor's official repository on GitHub (github.com/gate/gate-skills). These scripts are intended for manual synchronization and target a trusted vendor source. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources including news feeds, social media platforms (Reddit, Discord, Telegram, YouTube), and user-generated content via
gate-cli newscommands. This information is interpolated into the final research report, which could potentially allow third-party instructions to influence the agent's output. - Ingestion points:
gate-cli news feed search-news,gate-cli news feed search-ugc,gate-cli news feed get-social-sentiment, andgate-cli news events get-latest-eventsinSKILL.md. - Boundary markers: The instructions do not define explicit delimiters or warnings for the agent to ignore instructions embedded within the tool outputs.
- Capability inventory: The skill executes various system commands through the
gate-cliinterface. - Sanitization: There is no specific description of content filtering or sanitization for the data retrieved from external news and social sources before it is synthesized into the report.
Audit Metadata