gate-exchange-launchpool

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the gate-cli binary directly from the official Gate GitHub repository (github.com/gate/gate-cli). This download is required for the skill to interact with the exchange API.
  • [COMMAND_EXECUTION]: The skill executes gate-cli shell commands to perform staking, redemption, and reward queries. These operations are governed by a strict confirmation flow defined in the skill's reference documentation to prevent accidental or unauthorized transactions.
  • [PRIVILEGE_ESCALATION]: The setup.sh script utilizes sudo install to move the downloaded binary into /usr/local/bin if user-local installation is unavailable. This is a standard system administration practice for software installation.
  • [CREDENTIALS_UNSAFE]: The skill requires GATE_API_KEY and GATE_API_SECRET for authenticated operations. It follows security best practices by utilizing the CLI's native configuration wizard for setup and explicitly instructing the agent never to ask the user to provide secrets within the chat context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 03:51 PM