hyperliquid-api-reference

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to fetch documentation pages via HTTP (appending .md to GitBook URLs) when in doubt, which is an active search/fetch of external web content (low risk).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill provides API reference documentation and operation details for Hyperliquid, covering direct trading execution endpoints (/exchange actions such as placing orders, cancels, and modifying positions) that involve financial trading. However, the documentation notes that user-signed actions require the account's main wallet (which the desk never has, and transfers/withdrawals are explicitly marked no) while L1-signed actions can be signed by an API wallet. Independent access validation or authentication is required and handled by the exchange service layer via cryptographic signatures (EIP-712 signing schemes and API key/wallet authentication) for any exchange operations.