hyperliquid-websocket
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill incorporates the official
hyperliquidPython SDK and the@nktkas/hyperliquidTypeScript package to facilitate communication with the Hyperliquid platform's API. - [COMMAND_EXECUTION]: Instructions guide the user to run monitoring tasks in the background using
nohupand manage process states via PID files within the/workspace/trading-desk/watch/directory. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process live market and account data from external Hyperliquid WebSocket streams.
- Ingestion points: WebSocket streams from
wss://api.hyperliquid.xyz/wsandwss://api.hyperliquid-testnet.xyz/ws(specified inSKILL.md). - Boundary markers: None identified in the provided code snippets to distinguish between incoming data and agent instructions.
- Capability inventory: The skill performs local file writes to
/workspace/trading-desk/watch/ws.logand outputs data to the standard output stream (referenced inSKILL.md). - Sanitization: No explicit sanitization or content filtering of the WebSocket messages is present in the Python or TypeScript implementation examples.
Audit Metadata