hyperliquid-positions

Warn

Audited by Snyk on Oct 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill operates perp positions and margin on Hyperliquid through SDK and API write actions (updateLeverage, updateIsolatedMargin, and closing positions with exchange.order or exchange.market_close), which constitute direct financial operations (trades/swaps/position management). These operations execute via code examples without documented independent access control enforced by the service layer for the agent's route (the agent uses programmatic API keys/client objects).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 12, 2026, 11:46 PM
Issues
1