sponge-wallet
Warn
Audited by Socket on Jul 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
BENIGN in purpose alignment and install trust: the skill does what it claims and uses same-org official Sponge endpoints. However, it is HIGH security risk because it grants an AI agent broad financial powers and routes paid-service requests through Sponge as an intermediary, so misuse or over-broad agent permissions could cause direct monetary loss.
Confidence: 88%Severity: 74%
Audit Metadata