ClawHub

Gate Exchange Dual Investment

v1.0.0

Gate dual investment skill. Use when the user asks about dual currency products, target price settlement, or placing dual orders. Triggers on 'dual investmen...

⭐ 0· 60·0 current·0 all-time
bygaixg@gaixianggeng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Gate dual investment) align with the declared MCP tools and required env vars. The skill only needs GATE_API_KEY and GATE_API_SECRET and documents use of cex_earn_list_* and cex_earn_place_dual_order; requiring Earn:Write for order placement is appropriate for a trade/order placement skill.
✓
Instruction Scope
SKILL.md and references confine actions to the documented MCP tools, require explicit user confirmation before any write (place order) action, and explicitly forbid asking users to paste secrets into chat. The instructions do ask for strict pagination and transformation rules (e.g. multiply APY ×100, omit timestamps) — unusual but internally consistent and not over-broad. No instructions read unrelated host files or contact endpoints outside the MCP tooling.
✓
Install Mechanism
Instruction-only skill (no install spec, no code files). This is lowest-risk from an install/execution standpoint — nothing is downloaded or written to disk by the bundle itself.
ℹ
Credentials
The skill requests only GATE_API_KEY and GATE_API_SECRET (primaryEnv GATE_API_KEY), which is proportional to interacting with an exchange API. Note: Earn:Write is a high-privilege permission because it allows placing orders — that's necessary for the advertised functionality but users should ensure the API key's scope and account exposure are acceptable.
✓
Persistence & Privilege
always:false and no install/persistence actions are declared. The bundle's runtime rules state it does not store or paste secrets. Autonomous invocation is allowed (platform default), but this skill does not request permanent 'always' presence or to modify other skills/configs.
Scan Findings in Context
[NO_CODE_FILES] expected: The bundle is instruction-only so the regex-based scanner had no code to analyze; absence of findings is expected for this type of skill.
Assessment
This skill appears to do what it says: querying dual-investment products and (with explicit confirmation) placing dual orders via your local Gate MCP. Before installing: 1) Ensure you only provide API keys via your trusted MCP configuration (do not paste keys in chat). 2) Prefer using API keys scoped as narrowly as the platform allows; be aware Earn:Write permits placing orders and can move funds. 3) Test in read-only/query mode first to verify behavior. 4) Confirm the local MCP deployment (and any installer tools you run) is trusted. 5) Remember the financial risks: the skill itself already includes a non-investment-advice disclaimer, but placing orders can result in loss — only proceed if you understand and accept that risk.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cgac2g60dm4yhemaxvzhsv984a9xx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvGATE_API_KEY, GATE_API_SECRET
Primary envGATE_API_KEY

Comments