hyperliquid-trading-bot

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s trading behavior matches its stated purpose, and the documented API flow appears consistent with Hyperliquid usage, so this is not clearly malicious. However, it grants an AI agent the ability to perform autonomous financial transactions with a raw private key, and the skill publisher differs from the code publisher, creating meaningful trust and supply-chain risk.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Apr 28, 2026, 07:26 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Ftrending-skills%2Fhyperliquid-trading-bot%2F@4ff2bb2169734d454dca69addb512e4f4e9730d6