gate-info-web3
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources, including web search results and user-generated content (UGC) from platforms like Reddit, Telegram, and Discord.
- Ingestion points:
SKILL.md(Step 2) andreferences/cli-reference.mdspecify the use ofnews feed web-search,news feed search-news,news feed get-social-sentiment, andnews feed search-ugcto collect external data. - Boundary markers:
SKILL.md(Step 3: Synthesis) contains instructions for the agent to explicitly separate and label "on-chain / CLI facts" from "community or media interpretation." - Capability inventory: The skill executes a wide range of
gate-clisubcommands (e.g.,info onchain,info platformmetrics) as detailed inreferences/cli-reference.md. - Sanitization: The instructions focus on structural separation of data types in the final report rather than automated filtering or sanitization of the input content.
- [EXTERNAL_DOWNLOADS]: The skill includes maintenance scripts (
scripts/update-skill.shandscripts/update-skill.ps1) designed to keep the skill up to date. - The scripts fetch the latest version of the skill's code from the vendor's official GitHub repository at
github.com/gate/gate-skillsusing standard tools like git, curl, or wget. - [COMMAND_EXECUTION]: The skill relies on the execution of the
gate-clitool to perform its primary analysis functions, which involves invoking various subcommands to fetch protocol and wallet data.
Audit Metadata