gate-news-communityscan
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied 'coin' and 'topic' strings which are interpolated into parameters for the
news_feed_search_xandnews_feed_get_social_sentimenttools. - Ingestion points: User-provided
coinandtopicparameters extracted during the Execution Workflow inSKILL.md. - Boundary markers: Safety rules in
SKILL.mdrequire neutral presentation, source attribution, and clear platform labeling, but no structural delimiters are used for the parameters. - Capability inventory: Parallel MCP tool calls for fetching qualitative discussion and quantitative sentiment data.
- Sanitization: No explicit sanitization or escaping of the user-provided input parameters is documented.
- [COMMAND_EXECUTION]: The skill includes a deterministic shell probe in
SKILL.md(Step 0 — Wrapper routing probe) that executes when the skill is loaded to determine whether to delegate to a primary skill or fallback to the legacy workflow. It checks for the existence of files in several common IDE skill directories under the user's home path. - [EXTERNAL_DOWNLOADS]: The skill includes maintenance scripts (
scripts/update-skill.shandscripts/update-skill.ps1) that download updates from the vendor's repository atgithub.com/gate/gate-skillsusing git, ZIP, or tar.gz archives. - [DYNAMIC_EXECUTION]: The update mechanism in the maintenance scripts overwrites the skill's own instructions and scripts with remote content when the user confirms an update, allowing for the execution of new code in subsequent turns.
Audit Metadata