strike-perpetuals
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected in the skill's instructions or scripts.
- [COMMAND_EXECUTION]: The skill includes several Node.js scripts designed to interact with the Strike Finance v2 API. These scripts perform specific, documented trading functions such as fetching order books, checking positions, and placing limit/market orders.
- [PROMPT_INJECTION]: The instructions in SKILL.md contain no attempts to bypass safety filters or override the agent's core instructions. Instead, they provide constructive safety guidelines, such as requiring user confirmation for orders and warning about high leverage.
- [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential management by instructing the user to store API keys in environment variables rather than hardcoding them within the scripts or configuration.
Audit Metadata