Skills
skills/xinvxueyuan/novelai-image-mcp/novelai-cli/Gen Agent Trust Hub

novelai-cli

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the novelai-image-mcp package from PyPI using pip or execute it dynamically via uvx.
  • [COMMAND_EXECUTION]: The skill details the use of the novelai-image-mcp CLI, which executes shell commands to interact with NovelAI's image generation services.
  • [SAFE]: Authentication is handled via standard environment variables (NOVELAI_TOKEN, NOVELAI_USERNAME, NOVELAI_PASSWORD), which is a secure practice for CLI tools to avoid hardcoding secrets. All external network requests are directed to the official NovelAI domains (novelai.net). No obfuscation, persistence mechanisms, or malicious command injections were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 04:37 PM
Security Audit — agent-trust-hub — novelai-cli