mmk-notion-people

Warn

Audited by Socket on Mar 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The visible commands match the stated purpose, but the trust and data-flow model do not: the skill depends on an unverifiable `mmk` CLI and MMK documentation shows raw Notion credentials and workspace access data being routed through MMK-hosted intermediary APIs rather than official Notion endpoints. That makes the skill high-risk even without direct evidence of malware.

Confidence: 85%Severity: 84%
Audit Metadata
Analyzed At
Mar 16, 2026, 04:58 PM
Package URL
pkg:socket/skills-sh/magic-meal-kits%2Fmmk-skills%2Fmmk-notion-people%2F@1687e43d94351175ac24ccbb25e07e2583bf8d74