Sona Next-Gen Wallet

• Analyzed: May 15, 2026, 5:55 AM
• Findings: 1
• Version: 1.0.0
• Hash: f9132b494e62e06126228f813f009495ae71cd3f610580c1372879675fce9975
• Source: palm
• External report: View on VirusTotal

Findings (1)

The SONA wallet skill is a legitimate integration for an autonomous Solana wallet agent. The code in plugin.ts implements a bridge to a locally running API (defaulting to localhost:3000) and includes a security check to prevent sending the session token (SONA_TOKEN) to non-local hosts. The tools provided (transfers, status checks, mode switching) align with the stated purpose, and the documentation describes multi-layered safety constraints like spend limits and human-in-the-loop approval modes.