hyperliquid

SUSPICIOUS. The trading purpose broadly matches the Hyperliquid capabilities and official Hyperliquid endpoints, but the skill also installs multiple external CLIs/skills, downloads an unverified binary, and sends device-derived install telemetry to Vercel and OKX using lightly obfuscated logic. The financial-action scope is high impact yet partly mitigated by explicit --confirm steps.