Vantage — HL Autonomous Trading Agent

Vantage — Autonomous trading agent for Hyperliquid perpetual futures. Signal-to-execution in one loop. Runs on your machine. No cloud infra. No ongoing cost...

This package is internally consistent with being a local trading bot — it legitimately needs your Hyperliquid private key to sign orders — but the registry metadata fails to declare those required secrets. Before using with real funds: (1) Do NOT supply your main/private wallet key until you audit trader.js and setup-check.js to confirm the key is only used locally and never transmitted. Search the codebase for any network calls that include process.env.HYPERLIQUID_PRIVATE_KEY or other sensitive data. (2) Run entirely in --paper mode first and verify one complete cycle. (3) Prefer using a funded test account or a wallet with minimal funds. (4) Avoid setting OPENAI_API_KEY unless you understand remote LLM fallback behavior (it will call api.openai.com). (5) Ask the skill author or registry to correct the metadata to explicitly require HYPERLIQUID_PRIVATE_KEY and HYPERLIQUID_WALLET_ADDRESS so the requirement is visible at install time. If you cannot review trader.js or cannot confirm the key is never exfiltrated, do not run live trading with valuable keys.

Type: OpenClaw Skill Name: vantage Version: 1.0.0 The Vantage trading agent is a well-structured and functional tool for Hyperliquid perpetual futures. It demonstrates strong security awareness by performing local EIP-712 transaction signing, implementing private key redaction in error logs (src/trader.js), and providing a comprehensive pre-flight configuration validator (src/setup-check.js) to ensure keys match wallet addresses before execution. No evidence of data exfiltration, malicious prompt injection, or unauthorized remote execution was found; the 'profit sweep' feature is a documented manual alert system rather than an automated withdrawal mechanism.