hyperliquid
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill relies exclusively on the Python standard library (urllib, json, argparse, etc.), avoiding risks associated with third-party package dependencies.
- [SAFE]: Configuration is managed via standard .env files located in the project directory or the user's home directory. This follows best practices for secret and setting management.
- [SAFE]: The Hyperliquid client is strictly read-only, using the public /info endpoint. It does not contain capabilities for order placement, signing, or private key management.
- [SAFE]: All network operations are directed to the official Hyperliquid API domains (api.hyperliquid.xyz and its testnet variant), which are appropriate for the skill's stated purpose.
- [SAFE]: Data retrieved from the API is rendered into structured tables or exported to JSON files as requested by the user, with no evidence of unsafe dynamic execution or command injection vulnerabilities.
- [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation patterns were detected in the scripts or documentation.
Audit Metadata