ClawHub
Back to skill

Security audit

Hyperliquid Perps

Security checks for vulnerabilities and agentic risk

Overview

This skill is for live leveraged crypto futures automation but does not clearly require paper mode, explicit consent, or confirmation before high-impact trading actions.

Review this skill carefully before installing. Treat it as capable of steering an agent toward live leveraged crypto trading, and only use it with clear paper/live separation, explicit confirmations for orders or leverage changes, and account controls that limit possible losses.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

High
Confidence
97% confidence
Finding
The skill advertises 'paper and live perpetual futures trading,' leverage management, and automation, but provides no warning that it may affect real funds or engage in leveraged trading with significant liquidation risk. In this context, omission of prominent safety disclosures is dangerous because users may invoke the skill without understanding that automated or live actions could execute trades, amplify losses, or trigger cascading financial harm.

Vague Triggers

Medium
Confidence
93% confidence
Finding
The invocation phrase 'Use hyperliquid-perps to get started' is extremely broad and can trigger a high-risk trading skill without any constraint, confirmation step, or clarification of whether the user wants paper trading or live execution. In a skill capable of leveraged perpetual futures trading, ambiguous activation increases the chance of unintended use, accidental order placement, or unsafe automation around real funds.

Static analysis

No suspicious patterns detected.