gate-dex-wallet
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a set of instructions and local scripts (
install.sh,install_cli.sh) designed to configure the environment for wallet operations. These scripts modify standard agent configuration files (e.g.,mcp.json,CLAUDE.md,AGENTS.md) and install a globally-scoped CLI tool via npm. - [SAFE]: Sensitive data management follows security best practices. Credentials such as
mcp_tokenand OpenAPI keys are stored in standard local paths (e.g.,~/.gate-wallet/,~/.gate-dex-openapi/) with appropriate file permissions (chmod 600). - [SAFE]: The skill implements a mandatory security protocol ('Gate Verify') requiring a transaction check-in (
tx_checkin) before any signing or broadcasting of transactions, mitigating risks of unauthorized fund movement. - [SAFE]: External dependencies and network references are restricted to the vendor's infrastructure (
gatemcp.ai,gate.io,github.com/gate) or well-known technology services like CoinGecko, with no evidence of typosquatting or malicious redirects. - [SAFE]: Data ingestion surfaces (such as the x402 payment fetcher) are protected by explicit user confirmation gates and strict instructions to the agent to avoid autonomous URL modification.
Audit Metadata