hyperliquid

Warn

Audited by Snyk on Feb 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is specifically designed for cryptocurrency trading and wallet operations. It requires a wallet and private key, exposes commands that execute market and limit orders (e.g., /hl long, /hl short, /hl spot buy, /hl spot sell, TWAP buy/sell), supports leverage and margin adjustments, moves funds between accounts (transfer spot2perp, perp2spot), sends tokens and withdraws to L1 (/hl transfer send , /hl transfer withdraw ), and can deposit/withdraw from a vault. These are explicit crypto/blockchain and market-order execution capabilities (including signing transactions via provided private key), so it grants direct financial execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 20, 2026, 08:51 PM