sponge-wallet

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN in purpose alignment and install trust: the skill does what it claims and uses same-org official Sponge endpoints. However, it is HIGH security risk because it grants an AI agent broad financial powers and routes paid-service requests through Sponge as an intermediary, so misuse or over-broad agent permissions could cause direct monetary loss.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Jul 9, 2026, 10:46 PM
Package URL
pkg:socket/skills-sh/Solizardking%2Fsolana-clawd%2Fsponge-wallet%2F@8ddffe512454e7377cbef4078c26040da9d85a11d50dfcdc6a4727df7a8d1c07
Security Audit — socket — sponge-wallet