four-js-development-tools
Warn
Audited by Socket on Apr 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose broadly matches its capabilities, and the CLI install path appears official via npm. However, the integration routes authentication and API traffic through Membrane-managed infrastructure instead of directly to Four J's official APIs, creating meaningful third-party credential and data-flow risk that is only partially justified by the stated purpose.
Confidence: 86%Severity: 53%
Audit Metadata