perp-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes explicit CLI examples that pass private keys/API keys directly as command-line arguments (e.g., perp --json wallet set pac <SOLANA_KEY>), which would require the agent to accept and embed secret values verbatim into generated commands — a high exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to run perp-cli commands that fetch and parse live public exchange data (e.g., "perp --json arb scan", "perp --json market funding", and related reads shown in SKILL.md and the scripts like scripts/funding-analysis.sh and scripts/arb-monitor.sh), so it consumes untrusted third‑party market/scan outputs which the agent reads and acts on (affecting trade/execution decisions).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill uses npx to fetch and execute a remote package at runtime (e.g., "npx -y perp-cli@latest" which pulls from the npm registry at https://registry.npmjs.org/perp-cli), so external code is downloaded and executed and is required for several scripts to run.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a trading CLI for perpetual futures and related on-chain operations. It contains concrete commands to execute market and limit orders (e.g., "perp --json -e trade buy/sell", "trade limit", "trade close", "trade flatten", "trade cancel"), run/arbitrate and execute multi-legged trades ("perp --json arb exec ..."), and operate bots that place orders ("perp bot run", "perp bot start"). It also includes wallet management and key-setting commands ("perp --json wallet set ... ", bridging USDC, deposit/withdraw and HIP-3 on-chain DEX support), which are crypto wallet/signing and fund-movement capabilities. These are specific, purpose-built financial operations (crypto trading, order execution, wallet setup, bridging), not generic tools. Therefore it grants direct financial execution authority.