ClawHub

Gate Exchange Sub-Account

Security checks across malware telemetry and agentic risk

Overview

This Gate sub-account skill is purpose-aligned, but it needs powerful exchange-account authority and delegates top-priority runtime rules to an unreviewed remote file.

Review the remote Gate runtime rules and the Gate MCP installation before using this skill. Use a least-privileged Gate API key limited to sub-account management, and require fresh explicit confirmation for every create, lock, or unlock action.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Unrestricted Tool Access

Medium
Category
Excessive Agency
Content
## General Rules

⚠️ STOP — You MUST read and strictly follow the shared runtime rules before proceeding.
Do NOT select or call any tool until all rules are read. These rules have the highest priority.
→ Read [gate-runtime-rules.md](https://github.com/gate/gate-skills/blob/master/skills/gate-runtime-rules.md)
- **Only call MCP tools explicitly listed in this skill.** Tools not documented here must NOT be called, even if they
  exist in the MCP server.
Confidence
80% confidence
Finding
call any tool

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
## Safety Rules

- **Write operations** (`cex_sa_create_sa`, `cex_sa_lock_sa`, `cex_sa_unlock_sa`): Always require explicit user confirmation before execution. Never auto-execute.
- **UID validation**: Before lock/unlock, always verify the sub-account exists and belongs to the current main account.
- **State check**: Before lock/unlock, check current state to avoid redundant operations.
- **No sensitive data exposure**: Never expose API keys, internal endpoint URLs, or raw error traces.
Confidence
85% confidence
Finding
auto-execute

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal