hyperliquid-grid-trading-bot
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's stated purpose matches trading-bot behavior and a Hyperliquid private key is proportionate, but the trust chain is weak because ara.so publishes the skill while execution is delegated to an external GitHub repo from PolyPulse-Analytics that is not included here for verification. The larger risk is autonomous real-world trading on mainnet with private keys and downloaded code, which is high impact even without clear evidence of credential theft or malicious exfiltration.
Confidence: 83%Severity: 72%
Audit Metadata