perp-cli
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npmandnpxto install and execute theperp-clipackage. This is a legitimate vendor resource provided by the author (hypurrquant) to enable the skill's core functionality. - [COMMAND_EXECUTION]: The skill executes various shell commands via the
perpCLI. These operations are limited to trading, market analysis, and wallet management, and are supported by provided helper scripts likepreflight.shandvalidate-arb.shto ensure operational safety. - [CREDENTIALS_UNSAFE]: The skill handles blockchain private keys by allowing the user to provide them as arguments to the
perp wallet setcommand. The instructions include explicit safeguards, telling the agent to never read secret environment files or key files directly and to always obtain user confirmation before executing any trade. - [SAFE]: Analysis of the skill's instructions and scripts reveals no malicious patterns such as obfuscation, hidden URLs, or unauthorized data exfiltration. The skill follows best practices for AI agent tools by enforcing JSON output, dry-run simulations, and risk limit checks.
Audit Metadata