hyperliquid

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s capabilities broadly match its stated purpose as a Hyperliquid trading integration, and the cited .xyz/app/docs domains appear official rather than abusive. However, it enables autonomous high-impact financial actions and requires a raw private key, while no implementation code is provided to verify safe credential handling, approval gates, or exact endpoints.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Oct 19, 2026, 05:20 AM
Package URL
pkg:socket/skills-sh/alsk1992%2Fcloddsbot%2Fhyperliquid%2F@08e3efbc18c73d56862aacc6add9d27c28c4327832314b8cdef92d234bda949b