mmk-notion-people
Warn
Audited by Socket on Mar 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The visible commands match the stated purpose, but the trust and data-flow model do not: the skill depends on an unverifiable `mmk` CLI and MMK documentation shows raw Notion credentials and workspace access data being routed through MMK-hosted intermediary APIs rather than official Notion endpoints. That makes the skill high-risk even without direct evidence of malware.
Confidence: 85%Severity: 84%
Audit Metadata