Gate CrossEx Cross-Exchange Trading
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is a coherent trading integration, but it grants real exchange trading and transfer authority and tells the agent to follow mutable external runtime rules, so it needs careful review before use.
Install only if you trust the Gate MCP setup and are comfortable giving it CrossEx write authority. Confirm every trade, transfer, convert, cancellation, and leverage change carefully, and prefer a limited API key and small test funds. The remote runtime-rules dependency should be pinned or reviewed before relying on it for real trading.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may rely on external instructions that were not packaged with the skill and could change after installation.
The skill makes a mutable external document authoritative over execution. Because this skill can place trades and transfer funds, unreviewed changes to that remote instruction source could materially change agent behavior.
STOP — You MUST read and strictly follow the shared runtime rules before proceeding... These rules have the highest priority. → Read [gate-runtime-rules.md](https://github.com/gate/gate-skills/blob/master/skills/gate-runtime-rules.md)
Use only a pinned or packaged copy of the runtime rules, and do not allow remote instructions to override local safety gates or user confirmation requirements.
A confirmed action can change real exchange positions, funds, or risk exposure.
These MCP tools can create/cancel/update orders, transfer funds, convert assets, and change leverage. The same document requires explicit confirmation for mutations, so this is disclosed and purpose-aligned but high impact.
Write tools - cex_crx_create_crx_order ... cex_crx_cancel_crx_order ... cex_crx_create_crx_transfer ... cex_crx_update_crx_positions_leverage
Before confirming, verify exchange, symbol, side, quantity, price, leverage, and transfer destination/account scope.
The configured API key can authorize real trading and account changes through the MCP server.
The skill requires delegated account authority with CrossEx write permissions. That is expected for trading, but it is sensitive financial privilege and the registry metadata lists no primary credential.
Authentication - API Key Required: Yes ... Permissions: Crx:Write
Use the least-privileged API key possible, keep secrets out of chat, and consider using a small test allocation as the README suggests.
Security also depends on the separate MCP installer and configuration used outside this package.
The artifact has no install spec, but its setup instructions depend on separate installer skills and MCP configuration not included in the reviewed package. This appears user-directed and purpose-aligned, but provenance should be checked.
Install: Run installer skill for your IDE - Cursor: `gate-mcp-cursor-installer` ... OpenClaw: `gate-mcp-openclaw-installer`
Install the MCP server only from a trusted source and verify the API key permissions configured there.