Security audit

gate-info-defianalysis

Security checks for vulnerabilities and agentic risk

Overview

This is a read-only DeFi analysis skill that queries listed Gate-Info data tools and does not request credentials, local file access, persistence, or elevated permissions.

Before installing, confirm you trust the Gate-Info MCP server configured in your environment. Treat yield, reserve, and liquidation outputs as informational market data, not investment advice or guarantees.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The skill advertises broad trigger scenarios like generic DeFi, TVL, yield, reserves, and liquidation queries, which can overlap with common finance questions and cause the skill to activate when a more specific or safer skill would be more appropriate. Over-broad activation increases the chance of misrouting user intent, inappropriate tool usage, and unintended data handling, especially in an agentic environment where routing decisions directly control downstream tool calls.

Vague Triggers

Medium

Confidence: 95% confidence
Finding: Several routing keywords are vague, such as phrases equivalent to everyday requests like 'how's the market' or generic asset analysis, which can cause this skill to capture prompts outside its intended DeFi-metrics scope. In a multi-skill agent, ambiguous routing logic can be exploited or simply fail open, leading to wrong-skill execution, confusing outputs, and unnecessary exposure of tool capabilities.

Static analysis

No suspicious patterns detected.