hyperliquid-reader
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install an external package
@jackwener/openclifrom NPM and a supplementary plugin from a GitHub repository (github:himself65/finance-skills/hyperliquid). - [COMMAND_EXECUTION]: The skill relies on shell commands to interact with the Hyperliquid API via the
openclitool. It also implements a dynamic context injection pattern inSKILL.mdto run an environment status check (usingcommand -vandopencli markets) when the skill is initialized. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes market data from an external API (
api.hyperliquid.xyz). - Ingestion points: Market data is retrieved from
https://api.hyperliquid.xyz/infoas described inSKILL.mdandreferences/commands.md. - Boundary markers: The skill does not specify the use of delimiters or clear indicators to separate external API content from the agent's instructions.
- Capability inventory: All scripts and instructions rely on shell command execution via the
opencliutility as documented inSKILL.mdandreferences/commands.md. - Sanitization: There is no evidence of data sanitization or validation performed on the API responses before they are presented to the AI agent.
Audit Metadata