dsl-dynamic-stop-loss
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the analyzed files.
- [COMMAND_EXECUTION]: The
dsl-cli.pyanddsl-v5.pyscripts utilizesubprocess.runto executemcportercommands. This is the standard and intended method for interacting with the Hyperliquid exchange within the Senpi ecosystem. Arguments are safely handled using JSON serialization to prevent command injection. - [EXTERNAL_DOWNLOADS]: A reference to the official Hyperliquid API (
api.hyperliquid.xyz) exists in legacy code (dsl-v4.py) for price fetching. This is a well-known service and is used correctly for its primary function. - [DATA_EXFILTRATION]: Data access is restricted to the position state directory. There is no evidence of unauthorized data collection or transmission to external domains. File operations are limited to managing position metadata.
- [CREDENTIALS_UNSAFE]: The skill does not contain hardcoded secrets, API keys, or private keys. It relies on platform-level authentication provided through the
mcportertool.
Audit Metadata