hyperliquid-trading-bot

SUSPICIOUS: the skill's stated purpose matches trading capabilities, but its trust model is disproportionate for a bot that can move real funds. It asks the user to clone and run code from a non-official third-party repo, install unverified dependencies, and supply private keys that enable autonomous trading; the optional astral.sh installer is official but still adds supply-chain risk. I do not see confirmed malware or explicit exfiltration, but the combination of third-party code execution, wallet-key handling, and autonomous financial actions makes this a high-risk skill.