Nox Influencer - Creator Discovery & Influencer Marketing

• Risk level: Low
• Analyzed: Apr 29, 2026, 11:03 AM
• Findings: 0
• Version: 0.1.8

Overview

The skill's declared requirements and runtime instructions are coherent with a CLI wrapper for NoxInfluencer; requested credentials and binaries match its purpose, and there are no obvious mismatches, but the npm install and third‑party package provenance merit normal caution.

This skill is internally consistent for a CLI wrapper: it needs the noxinfluencer binary and an API key, and the instructions stick to the expected NoxInfluencer workflows. Before installing, verify the npm package provenance (@noxinfluencer/cli): check the package publisher, repository, and release history. Treat the NOXINFLUENCER_API_KEY like any credential — restrict its permissions if possible, store/rotate it securely, and avoid using a broad or long-lived account key in high-risk environments. Be aware the install runs third-party code (npm) and the CLI will write export files to disk; if you need extra safety, install and run the CLI in a sandbox or dedicated environment first, and confirm you want the agent to be able to execute the CLI autonomously. Finally, ensure you understand and approve any write actions (the skill emphasizes dry-run and explicit approval for send/apply operations).