sponsor-finder
Audited by Runlayer on Feb 22, 2026
Malicious tool definition detected
Tool: SKILL.md [1/2] Description: --- name: sponsor-finder description: Find which of a GitHub repository's dependencies are sponsorable via GitHub Sponsors. Uses deps.dev API for dependency resolution across npm, PyPI, Cargo, Go, RubyGems, Maven, and NuGet. Checks npm funding metadata, FUNDING.yml files, and web search.
Tool: SKILL.md [2/2] Description: a time**. --- ## Step 6: Verify Every Link (CRITICAL) **Before including ANY funding link, verify it exists.** Use `web_fetch` on each funding URL: - **Valid page** → ✅ Include - **404 / "not found" / "not enrolled"** → ❌ Exclude - **Redirect to valid page** → ✅ Include final URL Verify in batches of **5 at a time**. Never present unverified links.