hyperliquid
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches market and user data from Hyperliquid's public API endpoints, integrating external information into the agent's workspace.\n
- Ingestion points:
hyperliquid_client.pyretrieves data fromapi.hyperliquid.xyzvia POST requests to the/infoendpoint.\n - Boundary markers: The script produces structured output (tables or JSON) without specific delimiters for prompt isolation.\n
- Capability inventory: The skill can perform network reads (
urllib.request), output data to the terminal, and write JSON files to the local disk (exportcommand).\n - Sanitization: Data is parsed using the standard
jsonlibrary and specific fields are selected for display.\n- [SAFE]: The skill implements standard configuration practices by checking environment variables and local.envfiles for the API URL and user address. It does not require or manage sensitive credentials such as private keys.
Audit Metadata