skills/hypurrquant/perp-cli/perp-cli/Gen Agent Trust Hub

perp-cli

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npm and npx to install and execute the perp-cli package. This is a legitimate vendor resource provided by the author (hypurrquant) to enable the skill's core functionality.
  • [COMMAND_EXECUTION]: The skill executes various shell commands via the perp CLI. These operations are limited to trading, market analysis, and wallet management, and are supported by provided helper scripts like preflight.sh and validate-arb.sh to ensure operational safety.
  • [CREDENTIALS_UNSAFE]: The skill handles blockchain private keys by allowing the user to provide them as arguments to the perp wallet set command. The instructions include explicit safeguards, telling the agent to never read secret environment files or key files directly and to always obtain user confirmation before executing any trade.
  • [SAFE]: Analysis of the skill's instructions and scripts reveals no malicious patterns such as obfuscation, hidden URLs, or unauthorized data exfiltration. The skill follows best practices for AI agent tools by enforcing JSON output, dry-run simulations, and risk limit checks.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 08:01 PM