skills/novitalabs/novita-cli/novita/Socket

novita

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s capabilities mostly match its purpose, but the install provenance is materially inconsistent. Requiring an API key and forwarding it into an ambiguously verified CLI package creates elevated supply-chain and credential-forwarding risk, while GPU/serverless actions add real-world impact.

Confidence: 89%Severity: 76%

Audit Metadata

Analyzed At

Aug 18, 2026, 08:12 AM

Package URL

pkg:socket/skills-sh/novitalabs%2Fnovita-cli%2Fnovita%2F@99791d23a535e7dd2f4bef17a1545a728301249819f0fd197c44acfd34f3aef3