aicoin-hyperliquid
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). This skill explicitly fetches runtime data from the public AiCoin Open API (BASE default https://open.aicoin.com) via lib/aicoin-api.mjs and the scripts (scripts/hl-market.mjs, scripts/hl-trader.mjs), so the agent ingests external, open/public third‑party content (trader/whale/liquidation data) as part of its required workflow and those responses can materially influence subsequent analysis or actions.
Audit Metadata