Poke Perps

• Risk level: Low
• Analyzed: Feb 18, 2026, 8:00 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's instructions, endpoints, and optional wallet usage are coherent with its stated purpose (trading perpetuals on PokePerps); nothing requests unrelated credentials or installs, but users should be careful about providing a local Solana keypair and about allowing autonomous execution.

This skill is internally coherent for trading on PokePerps, but consider the following before installing: - If you plan to allow trade execution, do NOT supply a Solana keypair path unless you fully trust the skill and operator; that keyfile lets the agent sign and send real transactions that move funds. - Prefer read-only usage first (no keypair) to explore markets and simulations. Test with a throwaway or testnet wallet before using mainnet funds. - The SKILL.md expects Node tooling (npx/@pokeperps/mcp); verify the npm package (@pokeperps/mcp) and its maintainers before running it. - If you want to prevent accidental trades, disable autonomous/model invocation for this skill or require explicit user confirmation before any action that uses the keypair. - Verify the program ID and backend domain (backend.pokeperps.fun) on-chain/documentation independently if you will deposit funds. If you want, I can list the exact network endpoints and code snippets the skill will call so you can audit them yourself.