hyperliquid
Warn
Audited by Socket on Apr 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The trading capabilities largely match the stated purpose, but the skill enables autonomous financial transactions, requires a transitive wallet-policy skill, and asks for an overly broad wildcard wallet policy. The unspecified WALLET_SERVICE_URL creates a material trust and data-flow gap because wallet signing may be routed through an external service not pinned to an official domain.
Confidence: 87%Severity: 82%
Audit Metadata