hyperliquid-grid-trading-bot

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's stated purpose matches trading-bot behavior and a Hyperliquid private key is proportionate, but the trust chain is weak because ara.so publishes the skill while execution is delegated to an external GitHub repo from PolyPulse-Analytics that is not included here for verification. The larger risk is autonomous real-world trading on mainnet with private keys and downloaded code, which is high impact even without clear evidence of credential theft or malicious exfiltration.

Confidence: 83%Severity: 72%
Audit Metadata
Analyzed At
Sep 14, 2026, 02:09 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Ftrending-skills%2Fhyperliquid-grid-trading-bot%2F@ead989d009f80fb4066ed40b524079fd89a9ab2e129881e1f1cc482edec7bdfb