hyperliquid-grid-trading-bot
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a command to download and execute an installation script from
https://astral.sh/uv/install.sh. This URL belongs to the official domain of the well-known and reputableuvPython toolchain. - [COMMAND_EXECUTION]: The documentation guides the user through executing standard package management and runtime commands, such as
npm install,uv sync, andnpx tsx, which are necessary for the bot's operation and testing. - [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and processing external data, which creates a potential surface for indirect prompt injection.
- Ingestion points: Market price and order data from the Hyperliquid DEX API, and strategy definitions from local
bots/*.yamlconfiguration files. - Boundary markers: No explicit prompt delimiters are defined for isolating external data within the instructions, although the operations are performed via standalone scripts.
- Capability inventory: The skill has the capability to perform network requests (Hyperliquid API), write to the local file system (logging and environment setup), and execute shell commands.
- Sanitization: The skill provides a
npm run validatecommand to check the integrity and structure of configuration files before they are processed by the bot.
Recommendations
- HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh - DO NOT USE without thorough review
Audit Metadata