hyperliquid

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The trading capabilities largely match the stated purpose, but the skill enables autonomous financial transactions, requires a transitive wallet-policy skill, and asks for an overly broad wildcard wallet policy. The unspecified WALLET_SERVICE_URL creates a material trust and data-flow gap because wallet signing may be routed through an external service not pinned to an official domain.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Apr 25, 2026, 03:52 AM
Package URL
pkg:socket/skills-sh/Starchild-ai-agent%2Fofficial-skills%2Fhyperliquid%2F@8360a921ca68ddcfc4cd7bdc5d1b578d2936893d