Hyperliquid DEX Integration
v1.1.0Query Hyperliquid DEX for account balances, positions, PnL, and margin data via ClawdBot API
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The SKILL.md describes a read-only Hyperliquid query flow via a ClawdBot API proxy which matches the skill name and description. However, the SKILL.md expects an internal service (ClawdBot API) to exist and be callable; the registry metadata does not declare the required CLAWDBOT_API_URL (or any primary credential). This is an implementation gap: calling an internal proxy is plausible for a ClawdBot-targeted skill, but the required base URL must be declared.
Instruction Scope
Runtime instructions tell the agent to POST to {CLAWDBOT_API_URL}/api/hyperliquid/account and rely optionally on TRADING_WALLET_ADDRESS. The registry did not declare CLAWDBOT_API_URL; SKILL.md lists only TRADING_WALLET_ADDRESS as an env var (optional). The instructions do not ask for private keys and claim read-only access to public Hyperliquid endpoints, but they will transmit wallet addresses (public) to the ClawdBot proxy — the trustworthiness and authentication of that proxy are not described.
Install Mechanism
No install spec and no code files — instruction-only. This minimizes on-disk risk; nothing is downloaded or executed locally by the skill itself.
Credentials
The skill declares only an optional TRADING_WALLET_ADDRESS but the instructions require a CLAWDBOT_API_URL base endpoint which is not declared. No secrets or private keys are requested (good), but the undeclared dependency on a ClawdBot internal API endpoint is a proportionality/mis-declaration issue and could hide assumptions about authentication or headers that aren't documented.
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and allows model invocation (normal). It requests no persistent presence or elevated system privileges.
What to consider before installing
This skill appears to be a read-only adapter that queries Hyperliquid through a ClawdBot proxy — that is reasonable for the described purpose. However: (1) SKILL.md references {CLAWDBOT_API_URL} but the registry does not declare that environment variable; ask the publisher where the ClawdBot API base URL comes from and whether the platform will supply it. (2) Confirm whether the ClawdBot proxy requires authentication or will add headers; if it does, understand what credentials are used and where they are stored. (3) Verify the source/homepage or request source code before installing — the package has no public repo or homepage. (4) Test with a public wallet address first (no private keys) to confirm only public read-only data is transmitted. If the publisher cannot explain the CLAWDBOT_API_URL or provide provenance for the proxy, treat the skill as untrusted.Like a lobster shell, security has layers — review code before you run it.
clawdbotcryptodefiderivativesdexhyperliquidlatestmargin-tradingperpetualsportfoliotrading
Hyperliquid DEX Integration
Query your Hyperliquid perpetuals account for real-time balances, open positions, unrealized PnL, and margin data.
ClawdBot Integration
This skill is designed for ClawdBot - it calls ClawdBot's internal API server which proxies requests to the official Hyperliquid API at https://api.hyperliquid.xyz.
Architecture:
User → ClawdBot Gateway → ClawdBot API Server → Hyperliquid Public API
(Railway) (api.hyperliquid.xyz)
The ClawdBot API server handles:
- Timeout protection (15s)
- Response parsing and formatting
- Default wallet address from env vars
Capabilities
- Account Overview: Get total account value, free collateral, and margin usage
- Position Tracking: View all open perpetual positions with size, direction, entry price
- PnL Monitoring: Real-time unrealized PnL and return on equity per position
- Risk Management: Liquidation prices and leverage info for each position
- Multi-Wallet: Query any wallet address or use configured trading wallet
Environment Variables
| Variable | Required | Description |
|---|---|---|
TRADING_WALLET_ADDRESS | No | Default wallet address (0x format) to query when none provided |
API Endpoint
ClawdBot Internal API:
POST {CLAWDBOT_API_URL}/api/hyperliquid/account
Upstream API (called by ClawdBot):
POST https://api.hyperliquid.xyz/info
Request (Optional Body)
{
"walletAddress": "0x..."
}
If no wallet address provided, uses TRADING_WALLET_ADDRESS env var.
Response
{
"timestamp": "2026-02-10T03:30:00.000Z",
"walletAddress": "0x...",
"account": {
"accountValue": 10523.45,
"totalPositionNotional": 25000.00,
"freeCollateral": 5200.00,
"totalMarginUsed": 5323.45
},
"positions": [
{
"coin": "ETH",
"direction": "long",
"size": 2.5,
"entryPrice": 2450.00,
"positionValue": 6250.00,
"unrealizedPnl": 125.50,
"returnOnEquity": 0.024,
"leverage": { "type": "cross", "value": 5 },
"liquidationPrice": 1850.00,
"marginUsed": 1250.00
}
],
"positionCount": 1
}
Security Notes
- Read-only: This skill only reads account data, no trading/signing capabilities
- Public API: Uses Hyperliquid's public info API (no authentication required)
- No private keys: Only wallet addresses (public) are used
- Timeout protected: 15-second timeout prevents hanging requests
Example Usage
Check Account Balance
"What's my Hyperliquid balance?"
"Show my HL account value"
View Positions
"What positions do I have open on Hyperliquid?"
"Am I in profit on my perps?"
"What's my unrealized PnL?"
Risk Check
"What are my liquidation prices on Hyperliquid?"
"How much margin am I using?"
"What leverage am I running?"
Related
- Hyperliquid Docs
ichimoku- Ichimoku Cloud trading signalswallet-tracker- Monitor wallet balances across chainscrypto-tracker- Track crypto prices and portfolios
Comments
Loading comments...
