Back to skill

Security audit

Funding Rate Arbitrage

Security checks for vulnerabilities and agentic risk

Overview

This is a transparent trading-strategy guide, but users should treat it as risky financial code and verify it before any live deployment.

Install only if you want an agent to help write or adapt a Hyperliquid/Freqtrade funding-rate futures strategy. Before using it with real funds, independently backtest it, paper trade it, add explicit risk controls, and treat the basis-trade and short-side claims as incomplete unless you implement those parts yourself.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The manifest says the skill should be used for 'basis trade', which normally implies a spot-perp or otherwise hedged multi-leg structure. However, the reference implementation only reads perp funding and enters/exits a single perp position, and later documentation explicitly states the delta-neutral hedge is outside this strategy, contradicting the claimed scope.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The document presents the skill as covering funding-rate arbitrage broadly, including 'paid to short' cases and a short-harvest variant, but the reference strategy sets can_short = False, so it cannot execute short entries as written. This is an active contradiction between the documented intent and the supplied implementation, not merely omitted detail.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

This markdown describes a deployable trading strategy configuration for futures trading on Hyperliquid, including margin mode, stoploss, and multi-pair scaling, but it does not include an explicit user-facing warning about financial risk, liquidation risk, or that live trading may lose money. Under the markdown-specific warning criterion, behaviors affecting user funds and system integrity should be disclosed clearly.

Content

No source excerpt is available for this finding.