aicoin-hyperliquid
Audited by Runlayer on Mar 11, 2026
Risky tool definition detected
Tool: aicoin-hyperliquid/lib/aicoin-api.mjs Description: #!/usr/bin/env node // AiCoin API client with HMAC signing - shared lib import { createHmac, randomBytes } from 'node:crypto'; import { readFileSync, existsSync } from 'node:fs'; import { fileURLToPath } from 'node:url'; import { dirname, resolve } from 'node:path'; // Auto-load .env files (OpenClaw exec may not inject env vars into child processes) function loadEnv() { const candidates = [ resolve(process.cwd(), '.env'),
Risky tool definition detected
Users can replace with their own key via env vars.", "accessKeyId": "ronJ8uI0Yj2soAfGVs5H1YALUIINbE22", "accessSecret": "CWHZcH2us1CLSE7grroR1TpS0Z1JxTwU" }
Risky tool definition detected
**MUST tell the user**: AiCoin API Key 仅用于获取 Hyperliquid 链上分析数据,无法进行任何交易操作。如需在 Hyperliquid 上交易,需要单独配置钱包私钥(见 aicoin-trading skill)。所有密钥仅保存在你的本地设备 `.env` 文件中,不会上传到任何服务器。
Passed Files (3)Click to expand
Tool passed security scan
Tool passed security scan
Tool passed security scan