seeker-connect
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install several packages from the
@solana-mobileand@wallet-standardnamespaces via npm. These are legitimate vendor resources provided by the skill author and established ecosystem organizations. - [SAFE]: Communication between the application and the hardware wallet is conducted over Nostr relays using kind 20012 ephemeral events. The documentation specifies that all payloads are end-to-end encrypted, ensuring that the relay only processes ciphertext, which prevents data exposure.
- [SAFE]: The skill implements standard security practices for mobile wallet adapters, including the use of scoped authentication tokens (
authToken) and silent re-authorization to minimize user friction without compromising security. Storage of these tokens defaults to localStorage, which is standard for web-based wallet integration. - [SAFE]: No evidence of prompt injection, obfuscation, or unauthorized privilege escalation was found. The instructions clearly define error handling and session management boundaries.
Audit Metadata