notional-v3

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s crypto/DeFi transaction capabilities match its stated purpose, so this is not obviously deceptive, but it enables high-impact financial actions and relies on transitive installation plus an external CLI trust chain that is not fully verified in the skill text. The main concern is supply-chain and wallet-handling trust, not confirmed malware or explicit credential theft.

Confidence: 84%Severity: 76%
Audit Metadata
Analyzed At
Apr 9, 2026, 05:45 AM
Package URL
pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Fnotional-v3%2F@7767121bb3fb68bae33b80136ed37aa7a9a4a7f5