coinpilot-hyperliquid-copy-trade

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s behavior is mostly consistent with its stated copy-trading purpose and the publisher appears legitimate, but it requires and forwards multiple wallet private keys to a remote API and enables autonomous financial actions. This is not confirmed malware, yet it is high risk and should only run in a tightly trusted local environment with strict user approval for every trade-affecting action.

Confidence: 88%Severity: 86%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:17 PM
Package URL
pkg:socket/skills-sh/coinpilot-labs%2Fskills%2Fcoinpilot-hyperliquid-copy-trade%2F@7e3ff2bfc693040849f0fc05656d6b985118c562