skills/xinvxueyuan/novelai-image-mcp/novelai-cli/Socket

novelai-cli

Warn

Audited by Socket on Jul 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities and credential scope mostly match its stated NovelAI CLI purpose, and data flows appear proportionate. The main concern is install trust: the exact `novelai-image-mcp` package could not be verified from the provided evidence, so users may be asked to install and hand credentials to an uncertain package identity.

Confidence: 83%Severity: 64%

Audit Metadata

Analyzed At

Jul 28, 2026, 04:38 PM

Package URL

pkg:socket/skills-sh/xinvxueyuan%2FNovelAI-Image-MCP%2Fnovelai-cli%2F@487c20afa27f9808b88faea383a780633ff73c521f5c1efc857afc562052f405