gate-info-trendanalysis
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains instructions for the agent to execute local shell scripts (
update-skill.sh,update-skill.ps1) for maintenance tasks. It also uses inline bash probes to detect the presence of specific directories in the home folder and thegate-clitool. - [EXTERNAL_DOWNLOADS]: Maintenance scripts are designed to fetch updates and configuration files from the official Gate GitHub repository (
github.com/gate/gate-skills) using standard utilities likecurl,wget, orInvoke-WebRequest. - [REMOTE_CODE_EXECUTION]: The skill implements a self-update mechanism that can download and overwrite its own instructions and scripts from the vendor's remote repository. This process requires a specific confirmation token generated by a preliminary check script to prevent unauthorized modifications.
- [SAFE]: All operations, including environment probing and remote updates, are associated with the official vendor 'gate' and are used for legitimate skill management purposes. No data exfiltration or credential harvesting patterns were detected.
Audit Metadata