Is b0on/hyperliquid-analyzer safe?
Use with caution. b0on/hyperliquid-analyzer is not clearly unsafe, but the audit flagged risks to review before you install it. Oathe's behavioral security audit gave the hyperliquid-analyzer skill by b0on a trust score of 76/100 with 3 findings (1 high).
https://github.com/openclaw/skills/tree/main/skills/b0on/hyperliquid-analyzer
Is b0on/hyperliquid-analyzer safe to install?
This skill appears to be a legitimate cryptocurrency market analysis tool with clean documentation and no obvious malicious content. However, security monitoring detected concerning access to multiple sensitive credential files during installation, creating a significant security risk despite the benign skill content.
What security issues were found in b0on/hyperliquid-analyzer?
Category Scores
Findings (3)
HIGH Multiple sensitive credential files accessed -70 ▶
During skill installation, the monitoring system detected access to multiple sensitive credential files including SSH private keys, AWS credentials, Docker config, GCloud credentials, and environment files. While the skill content appears benign, this access pattern raises significant security concerns.
LOW External network connections during installation -15 ▶
The skill installation process made network connections to external services, which is expected for git clone operations but increases attack surface.
MEDIUM Discrepancy between skill content and file access behavior -30 ▶
While the skill content appears legitimate (cryptocurrency market analysis), the detected access to sensitive files creates a concerning behavioral pattern that warrants caution.
Should I install b0on/hyperliquid-analyzer?
Oathe's verdict for b0on/hyperliquid-analyzer is CAUTION with a trust score of 76/100. Recommendation: Install with caution.