hyperliquid-supurr

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Hyperliquid Supurr Skill presents a coherent, purpose-aligned set of capabilities for managing automated trading bots with configurable strategies, backtesting, deployment, and monitoring. The credential handling (wallet addresses and API keys) is appropriate for the domain but introduces a sensitive surface area that requires careful protection (encryption, access controls). No evident supply-chain or exfiltration patterns are described; there are no unverifiable binaries or external data sinks beyond the expected API interactions. Overall, the footprint is benign and proportionate to the stated purpose, with moderate security considerations around credential storage and local config/data management.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 01:20 PM
Package URL
pkg:socket/skills-sh/supurr-app%2Fsupurr_skill%2Fhyperliquid-supurr%2F@73cf15acf2724b3b42546dc83dc13d87e52901a2