coinpilot-hyperliquid-copy-trade
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s behavior is mostly consistent with its stated copy-trading purpose and the publisher appears legitimate, but it requires and forwards multiple wallet private keys to a remote API and enables autonomous financial actions. This is not confirmed malware, yet it is high risk and should only run in a tightly trusted local environment with strict user approval for every trade-affecting action.
Confidence: 88%Severity: 86%
Audit Metadata