Hyperliquid CLI (with HIP3 Support)
v1.0.3Trade crypto, stocks (AAPL, NVDA, TSLA), indexes, and commodities (GOLD, SILVER) 24/7 on Hyperliquid via HIP-3. Real-time position & P&L tracking, orderbook monitoring, multi-account management, and websocket client for sub-5ms low-latency high-frequency trading.
⭐ 5· 2.9k·9 current·11 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill's capabilities (placing orders, WebSocket market data, multi-account management) logically require a CLI, an API/trading private key, and local state — which SKILL.md declares (hl binary, HYPERLIQUID_PRIVATE_KEY, ~/.hyperliquid). However, the registry metadata provided earlier claims 'required env vars: none' and 'required binaries: none', which contradicts SKILL.md. That mismatch is unexplained and reduces trust.
Instruction Scope
The SKILL.md instructs only CLI usage, installing the npm package, setting an API private key, running a local background server, and interacting with local files (~/.hyperliquid). Those actions are within the stated trading purpose. Notably, examples show sending JSON to arbitrary webhooks (user-specified) — that is a user action but could be misused if an attacker convinces a user to supply an endpoint.
Install Mechanism
Install is via 'npm install -g hyperliquid-cli' (declared in SKILL.md). Global npm installs are a common but moderate-risk vector (untrusted package code runs on install). There is no download from unusual URLs, but because the skill is instruction-only, the npm package is the primary code surface to audit — verify author, package integrity, and GitHub repo before running.
Credentials
Functionally, requiring a single trading private key (HYPERLIQUID_PRIVATE_KEY) is proportionate to a trading CLI. But the registry metadata omitted this required env var and the required binary entry; that inconsistency is concerning. The SKILL.md also directs storing account data under ~/.hyperliquid which is reasonable for a CLI but worth auditing (local secrets storage).
Persistence & Privilege
The skill is not always-enabled and does not request platform-wide privileges. It recommends running a background server (hl server) and stores state under ~/.hyperliquid; those are normal for a high-performance trading CLI. Still, a background server holding live private keys increases exposure if the CLI or package is malicious.
What to consider before installing
What to consider before installing:
- The SKILL.md requires installing 'hyperliquid-cli' globally and setting HYPERLIQUID_PRIVATE_KEY (a raw private key). The registry metadata you saw earlier did not list these — treat that mismatch as a red flag and verify the skill metadata/source.
- Before running 'npm install -g hyperliquid-cli', check the npm package page and GitHub repo (https://github.com/chrisling-dev/hyperliquid-cli) for: author identity, recent commits, issues, and whether the published package matches source code. Prefer packages with many users and clear provenance.
- Never paste your main trading private key into prompts or export it permanently until you trust the package. Prefer using a scoped/trading-only API key or a testnet key for initial testing. Consider using an address with limited funds or a hardware wallet/isolated VM.
- Inspect ~/.hyperliquid after use to see what data is stored; remove keys when not needed. Avoid persisting secrets as environment variables in long-lived shells if you can.
- Because the package runs code on install and offers a background server that keeps keys in memory/disk, run it in an isolated environment (container or VM) until you audit it.
- If you want to proceed: test with --testnet and a limited key, review the package contents locally (npm pack / inspect), and confirm the published package source matches the GitHub repo and expected maintainer.Like a lobster shell, security has layers — review code before you run it.
latestvk97b0n02xpazzwbcvyharva21d80a24q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
