hyperliquid-grid-trading-bot

Fail

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes a command to download and execute an installation script from https://astral.sh/uv/install.sh. This URL belongs to the official domain of the well-known and reputable uv Python toolchain.
  • [COMMAND_EXECUTION]: The documentation guides the user through executing standard package management and runtime commands, such as npm install, uv sync, and npx tsx, which are necessary for the bot's operation and testing.
  • [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and processing external data, which creates a potential surface for indirect prompt injection.
  • Ingestion points: Market price and order data from the Hyperliquid DEX API, and strategy definitions from local bots/*.yaml configuration files.
  • Boundary markers: No explicit prompt delimiters are defined for isolating external data within the instructions, although the operations are performed via standalone scripts.
  • Capability inventory: The skill has the capability to perform network requests (Hyperliquid API), write to the local file system (logging and environment setup), and execute shell commands.
  • Sanitization: The skill provides a npm run validate command to check the integrity and structure of configuration files before they are processed by the bot.
Recommendations
  • HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 14, 2026, 02:09 AM