novelai-workflows
Warn
Audited by Socket on Jul 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent, and the network endpoints match NovelAI, but the skill relies on a non-official personal CLI/MCP implementation and forwards NovelAI credentials to it. That makes the footprint disproportionate to a simple workflow-guide skill and raises significant supply-chain and credential-handling risk.
Confidence: 86%Severity: 82%
Audit Metadata