seeker-connect
Warn
Audited by Snyk on Oct 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documentation describes "Seeker Connect", a developer SDK and Wallet Standard adapter for connecting web dapps running on a Solana Mobile Seeker device to the device's built-in wallet via the Mobile Wallet Adapter (MWA) protocol and Nostr relays. It provides connection and transaction signing capabilities (e.g.,
solana:signAndSendTransaction), which constitute delegated direct financial operations (blockchain transaction submission/signing). However, wallet interactions require physical consent/authorization on the mobile device via the wallet's built-in consent UI and MWA session protocol. The underlying wallet enforces independent authorization for all transaction and connection requests, meaning the agent cannot unilaterally authorize or execute transactions without device-level user approval.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata