gate-exchange-staking
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill includes robust safety guidelines that explicitly instruct the agent to reject requests for 'Stake', 'Redeem', or 'Mint' operations. These instructions ensure the skill remains in a read-only state and prevent unauthorized transactional behavior.
- [DATA_EXFILTRATION]: No unauthorized network operations or sensitive data access patterns were detected. The skill uses localized MCP tools (e.g.,
cex_earn_asset_list) to fetch information from the exchange, and there are no indicators of data being sent to untrusted third-party domains. - [COMMAND_EXECUTION]: The skill does not contain any instructions for executing shell commands, system calls, or binary files. All logic is focused on natural language processing, tool routing, and data formatting.
- [SAFE]: The architecture follows the principle of least privilege by strictly limiting the agent's capabilities to query-only operations and providing clear, safe response templates for all supported scenarios.
Audit Metadata