NadName Agent

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The overall purpose is coherent for a blockchain naming skill, and the listed endpoints are mostly on-brand, but this skill performs real on-chain spending, routes users through an undocumented API-backed signing flow, references missing local scripts that would receive wallet secrets, and contains a contract address that conflicts with current official docs. These inconsistencies make it risky to trust without code review and contract/API verification.

Confidence: 87%Severity: 76%
Audit Metadata
Analyzed At
Oct 23, 2026, 02:54 AM
Package URL
pkg:socket/skills-sh/daaab%2Fagent-skills%2Fnadname-agent%2F@9d5cfcf478b2647dd59e1b078e928d53a0b2d123f1f50dc5f60c543dc8a74815