portfolio

SUSPICIOUS. The skill's core exchange-account tracking purpose is coherent, and the credential types mostly match official platform auth models, but the request for a raw Hyperliquid private key is disproportionate for a portfolio viewer and creates high-impact credential exposure if implemented carelessly. With no install path or proxy endpoint shown, this is not confirmed malicious, but it carries meaningful security risk from broad credential access and underspecified data handling.