skills/xinvxueyuan/novelai-image-mcp/novelai-cli/Socket

novelai-cli

Warn

Audited by Socket on Aug 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities and credential scope mostly match its stated NovelAI CLI purpose, and data flows appear proportionate. The main concern is install trust: the exact `novelai-image-mcp` package could not be verified from the provided evidence, so users may be asked to install and hand credentials to an uncertain package identity.

Confidence: 83%Severity: 64%

Audit Metadata

Analyzed At

Aug 29, 2026, 05:30 PM

Package URL

pkg:socket/skills-sh/xinvxueyuan%2Fnovelai-image-mcp%2Fnovelai-cli%2F@d5f2ee1b755d13317743d1ebbcc567462f590a442bbdef01dbb7e3b4852feb72