The Agent Skills Directory

[SAFE]: The skill manages authentication credentials using the NOVELAI_TOKEN environment variable rather than hardcoding secrets, which is a standard and recommended security practice.
[SAFE]: Network operations are directed towards legitimate and well-known NovelAI API endpoints (image.novelai.net and api.novelai.net) necessary for the skill's stated functionality.
[SAFE]: File system interactions are limited to writing generated images to a designated output directory (NOVELAI_OUTPUT_DIR), which defaults to a local outputs folder.
[SAFE]: The use of Base64 encoding is strictly for image data and vibe tokens as required by the NovelAI API, and does not contain obfuscated commands or malicious instructions.

novelai-mcp-tools