hyperliquid-positions
Warn
Audited by Snyk on Oct 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill operates perp positions and margin on Hyperliquid through SDK and API write actions (
updateLeverage,updateIsolatedMargin, and closing positions withexchange.orderorexchange.market_close), which constitute direct financial operations (trades/swaps/position management). These operations execute via code examples without documented independent access control enforced by the service layer for the agent's route (the agent uses programmatic API keys/client objects).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata