gate-info-research

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes scripts/update-skill.sh and scripts/update-skill.ps1, which are utility scripts used to synchronize the local skill files with the vendor's official repository on GitHub (github.com/gate/gate-skills). These scripts are intended for manual synchronization and target a trusted vendor source.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources including news feeds, social media platforms (Reddit, Discord, Telegram, YouTube), and user-generated content via gate-cli news commands. This information is interpolated into the final research report, which could potentially allow third-party instructions to influence the agent's output.
  • Ingestion points: gate-cli news feed search-news, gate-cli news feed search-ugc, gate-cli news feed get-social-sentiment, and gate-cli news events get-latest-events in SKILL.md.
  • Boundary markers: The instructions do not define explicit delimiters or warnings for the agent to ignore instructions embedded within the tool outputs.
  • Capability inventory: The skill executes various system commands through the gate-cli interface.
  • Sanitization: There is no specific description of content filtering or sanitization for the data retrieved from external news and social sources before it is synthesized into the report.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:04 PM