seeker-connect

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install several packages from the @solana-mobile and @wallet-standard namespaces via npm. These are legitimate vendor resources provided by the skill author and established ecosystem organizations.
  • [SAFE]: Communication between the application and the hardware wallet is conducted over Nostr relays using kind 20012 ephemeral events. The documentation specifies that all payloads are end-to-end encrypted, ensuring that the relay only processes ciphertext, which prevents data exposure.
  • [SAFE]: The skill implements standard security practices for mobile wallet adapters, including the use of scoped authentication tokens (authToken) and silent re-authorization to minimize user friction without compromising security. Storage of these tokens defaults to localStorage, which is standard for web-based wallet integration.
  • [SAFE]: No evidence of prompt injection, obfuscation, or unauthorized privilege escalation was found. The instructions clearly define error handling and session management boundaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 12:50 AM
Security Audit — agent-trust-hub — seeker-connect