Back to skill
Skillv0.1.0

VirusTotal security

Nautilus Trader · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:41 AM
Hash
099b0aaeef3bedf229aa8eb20dab8609f4de94192e6695774a5b7efd09d5b996
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: nautilus-trader Version: 0.1.0 The skill is designed for algorithmic trading on Hyperliquid, which inherently involves high-risk operations like handling cryptocurrency private keys and executing live trades. The `SKILL.md` and Python scripts (`references/hyperliquid_patch.py`, `references/live_trading.py`, `references/set_leverage.py`) transparently request and use `HYPERLIQUID_PK` and `HYPERLIQUID_VAULT` from environment variables to interact with the legitimate Hyperliquid API. The `hyperliquid_patch.py` file implements a monkey-patch to fix known bugs in the Nautilus Trader's Hyperliquid adapter (serialization and price precision issues), which is a vulnerability *fix* for a third-party library, not a malicious act by the skill itself. All actions, including the use of broad `Bash` permissions for `pip install` and script execution, are directly aligned with the stated purpose of enabling live trading and strategy development, without any evidence of intentional harmful behavior or prompt injection attempts against the agent.
External report
View on VirusTotal