Is adwilkinson/hl-privateer-fund safe?
https://github.com/openclaw/skills/tree/main/skills/adwilkinson/hl-privateer-fund
HL Privateer is a legitimate DeFi trading data API skill with no malicious code, no data exfiltration vectors, and clean install behavior. The primary risk is financial: the skill instructs agents to automatically execute cryptocurrency micropayments (USDC on Base) for API access and provides copy-trading instructions that could lead to leveraged trading exposure. No hidden instructions, executable payloads, or canary file tampering were detected.
Category Scores
Findings (8)
MEDIUM Instructs automated cryptocurrency payments -15 ▶
The skill instructs the agent to follow a multi-step x402 payment flow: receive a 402 challenge, sign a USDC payment on Base network, and retry with the signed payment header. This means an agent following these instructions will spend real cryptocurrency on behalf of the user for each paid API call. While costs are small ($0.01-$0.03), there are no built-in spending limits or confirmation gates in the skill's instructions.
MEDIUM Copy-trading could lead to financial losses -25 ▶
The skill provides detailed copy-trading instructions including polling for positions and signals. An agent configured for copy-trading could mirror leveraged perpetual futures positions, exposing the user to significant financial risk beyond the small per-call API costs.
LOW Multiple external domain references -8 ▶
The skill references 5+ external domains that the agent is expected to make network requests to. While these are all related to the skill's stated purpose, they expand the agent's network surface area.
LOW Private key handling in examples -5 ▶
The x402.md payment guide includes TypeScript examples using privateKeyToAccount('0x
LOW Agent persona framing -5 ▶
The skill uses direct persona framing ('You are an agent') to establish the agent's role, though this is mild and contextually appropriate for a skill definition.
INFO Payment signatures sent to external facilitator -5 ▶
The x402 payment flow requires sending signed payment data (including wallet address) to the facilitator at facilitator.payai.network and the API server. This is the core functionality, not exfiltration, but exposes wallet identity to third parties.
INFO Executable code examples in documentation -5 ▶
The skill contains curl commands, TypeScript, and Python code examples that an agent might execute. These are documentation examples, not standalone executable files, but an agent with shell access could run them.
INFO Clean install with expected network activity only -4 ▶
Network monitoring during clone shows only expected connections: GitHub for git clone, Ubuntu mirrors for system services, local DNS. No connections to the skill's API domains were observed during installation.