gate-info-risk
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from news feeds and security events via the
gate-cli newscommand. To mitigate injection risks from this data, the skill mandates a strict 5-section report template and explicitly instructs the agent to separate verified facts from community speculation. - [EXTERNAL_DOWNLOADS]: The skill provides optional update scripts (
update-skill.shandupdate-skill.ps1) designed to sync the skill instructions with the official repository on GitHub (github.com/gate/gate-skills). These are standard maintenance mechanisms originating from the skill's author. - [COMMAND_EXECUTION]: The skill invokes the
gate-cliutility to perform blockchain risk analysis. These calls are well-defined within the playbook and include safety checks to prevent the leakage of API credentials in shell output.
Audit Metadata