Back to skill

Security audit

HyperGrok Hyperliquid Market Data

Security checks for vulnerabilities and agentic risk

Overview

This skill provides read-only instructions for collecting public Hyperliquid market data and does not request credentials, trading authority, or hidden persistence.

Before installing, understand that this skill may guide your agent to make public Hyperliquid API requests and optionally save market-data CSV files locally, but it does not trade, sign requests, or use private keys.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.