Security audit

Decker + Hyperliquid

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent trading skill, but it documents high-impact financial actions and sensitive key handling in ways users should review carefully before installing.

Install only if you understand that this skill can guide Decker/Hyperliquid trading actions and may involve giving Decker a trade-capable private key. Use a dedicated low-risk API wallet, confirm every order manually, avoid putting secrets in URLs or logs, and check whether Decker provides key storage, revocation, replay protection, and order limits.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:32
Finding: Authentication Secret Exposed in a State-Changing GET Request
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Error

Location: SKILL.md:45
Finding: External Service Receives a Transaction-Signing Private Key
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Missing User Warnings

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The documentation shows a GET request that places a secret value (openclaw_secret) directly in the URL query string. Secrets in URLs are commonly exposed through logs, browser history, intermediary proxies, monitoring tools, and referrer leakage, making credential compromise more likely; in this context, compromise could enable unauthorized order-request generation against a trading workflow.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The trigger list includes broad terms such as "DEX," "영구선물," and generic price/position phrases that can match ordinary crypto discussion, causing the trading skill to activate outside clear user intent. In a skill capable of facilitating order flows, over-broad invocation increases the chance of inappropriate tool routing and accidental progression toward sensitive trading actions.
Content: No source excerpt is available for this finding.

Skill Enumeration

Medium

Category: Agent Snooping
Confidence: 80% confidence
Finding: Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
Content: Scanner excerpt · SKILL.md (reported line 83)May include surrounding context.
md
## 참고 - 메인 decker 스킬: `docs/openclaw_skills/decker/SKILL.md` - Hyperliquid: 탈중앙 영구선물 DEX