seeker-connect

Warn

Audited by Snyk on Oct 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documentation describes "Seeker Connect", a developer SDK and Wallet Standard adapter for connecting web dapps running on a Solana Mobile Seeker device to the device's built-in wallet via the Mobile Wallet Adapter (MWA) protocol and Nostr relays. It provides connection and transaction signing capabilities (e.g., solana:signAndSendTransaction), which constitute delegated direct financial operations (blockchain transaction submission/signing). However, wallet interactions require physical consent/authorization on the mobile device via the wallet's built-in consent UI and MWA session protocol. The underlying wallet enforces independent authorization for all transaction and connection requests, meaning the agent cannot unilaterally authorize or execute transactions without device-level user approval.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 22, 2026, 12:48 AM
Issues
1