notional-v3
Warn
Audited by Socket on Apr 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s crypto/DeFi transaction capabilities match its stated purpose, so this is not obviously deceptive, but it enables high-impact financial actions and relies on transitive installation plus an external CLI trust chain that is not fully verified in the skill text. The main concern is supply-chain and wallet-handling trust, not confirmed malware or explicit credential theft.
Confidence: 84%Severity: 76%
Audit Metadata