paid-ads-guide

Warn

Audited by Socket on Aug 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. This wrapper skill is not independently harmful, but it cannot be fully validated because its real behavior lives in an unprovided delegated SKILL.md. Based on public evidence, NotFair uses vendor-hosted MCP endpoints as an intermediary for ads access, which is coherent with the product but raises medium data-flow and trust concerns until the referenced local skill is reviewed.

Confidence: 79%Severity: 58%
Audit Metadata
Analyzed At
Aug 15, 2026, 03:15 PM
Package URL
pkg:socket/skills-sh/nowork-studio%2Fnotfair-plugin%2Fpaid-ads-guide%2F@5652274e89de34504613964163b6d5724dbe5ea4dd6225363a6a0348d8f5cee8
Security Audit — socket — paid-ads-guide