hyperliquid
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is specifically designed for cryptocurrency trading and wallet operations. It requires a wallet and private key, exposes commands that execute market and limit orders (e.g., /hl long, /hl short, /hl spot buy, /hl spot sell, TWAP buy/sell), supports leverage and margin adjustments, moves funds between accounts (transfer spot2perp, perp2spot), sends tokens and withdraws to L1 (/hl transfer send , /hl transfer withdraw ), and can deposit/withdraw from a vault. These are explicit crypto/blockchain and market-order execution capabilities (including signing transactions via provided private key), so it grants direct financial execution authority.
Audit Metadata