Gate Exchange Spot Demo
WarnAudited by ClawScan on May 10, 2026.
Overview
This Gate trading skill is mostly purpose-aligned, but it can trade on a user’s exchange account and delegates high-priority runtime behavior to an unpinned external GitHub file that was not included for review.
Only install this if you intentionally want an agent to help draft and execute Gate spot trades. Before using it, verify the external Gate runtime rules, prefer a restricted API key with withdrawals disabled, and do not confirm any order, cancellation, or amendment unless the draft exactly matches your intent.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may follow trading-related instructions that were not packaged or reviewed with the skill, and those instructions could change after installation.
The skill makes an external GitHub file on the mutable master branch authoritative at runtime, but that file is not included in the reviewed artifacts. In a trading skill, unreviewed changing instructions could materially alter how account actions are performed.
STOP — You MUST read and strictly follow the shared runtime rules before proceeding... These rules have the highest priority. → Read [gate-runtime-rules.md](https://github.com/gate/gate-skills/blob/master/skills/gate-runtime-rules.md)
Require the runtime rules to be bundled or pinned to a specific commit, and review that file before allowing write-enabled trading actions.
If misused or confirmed accidentally, the agent could place, amend, or cancel spot trades on the user’s Gate account.
The skill needs a write-enabled exchange API key and wallet/account read access. This is expected for spot trading, but it gives the agent authority to place and manage real orders.
API Key Required: Yes ... Permissions: Spot:Write, Wallet:Read
Use the least-privileged API key possible, disable withdrawals, apply exchange-side limits if available, monitor activity, and revoke the key when no longer needed.
Confirmed actions can affect real account positions and open orders, including broad cancellation or batch changes.
The skill exposes high-impact trading and order-management tools, including batch and cancel-all actions. The local MCP rules do require a confirmation gate, making this purpose-aligned but still important for users to notice.
Write Tools ... cex_spot_create_spot_order ... cex_spot_cancel_all_spot_orders ... cex_spot_amend_spot_batch_orders ... Before any write tool call, show an order draft ... Only execute after explicit user confirmation in immediate previous turn.
Carefully review every order draft, require a fresh confirmation for each trade or cancellation, and avoid broad commands like cancel-all unless that is exactly intended.