Hyperliquid

• Analyzed: May 12, 2026, 3:05 AM
• Findings: 1
• Version: 1.0.0
• Hash: f50b2f5b39277081140034e4a08eededb66c0837b315155b8ada5ad2e947610f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill bundle for Hyperliquid is benign. It is explicitly stated as 'read-only' and interacts solely with the public Hyperliquid Info API (`https://api.hyperliquid.xyz/info`). Local configuration, such as account aliases, is stored transparently in `~/.clawdbot/hyperliquid/config.json`. There is no evidence of data exfiltration, malicious execution, persistence, obfuscation, or prompt injection attempts against the agent beyond legitimate instructions for parsing user input and formatting responses, as seen in `SKILL.md` and `scripts/hyperliquid_chat.mjs`.