openfin-hyperliquid

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents direct financial operations including placing trading orders (perps, spot, HIP-3, HIP-4), leverage updates, margin adjustments, withdrawals, and outcome splits/merges via POST /agent/trading/orders, POST /agent/trading/withdraw, etc. (SKILL.md:50-52, SKILL.md:389-400). It relies entirely on instruction-based safety rules (e.g., "Get explicit confirmation in chat before calling" at SKILL.md:58) rather than an independent authentication or authorization mechanism enforced by the service or execution layer for the payment route itself.