hyperliquid

Warn

Audited by Socket on Apr 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The trading purpose broadly matches the claimed Hyperliquid functionality, but the skill's footprint is larger than necessary: it installs transitive skills, downloads an unverifiable executable, and phones home install telemetry including a derived device fingerprint to third-party endpoints. Because it also enables leveraged trading actions, the overall security risk is high even though there is no definitive proof of malware.

Confidence: 90%Severity: 87%
Audit Metadata
Analyzed At
Apr 8, 2026, 04:45 PM
Package URL
pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Fhyperliquid%2F@3889469b1894bb37f3dfbe0784726fe80b924054