tools4ever

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose is plausible, and the CLI comes from an official registry tied to the publisher, so this is not confirmed malware. However, the skill is not a direct Tools4ever integration: it requires installing a vendor CLI, creating a Membrane account, and routing authentication plus all action traffic through Membrane-hosted connectors. That intermediary data flow and credential handling are a meaningful trust and privacy concern, especially with an unpinned CLI install.

Confidence: 85%Severity: 61%
Audit Metadata
Analyzed At
Apr 29, 2026, 06:36 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftools4ever%2F@2e12d501059c7d1165f3bea9bf2847cc8f7553b4
Security Audit — socket — tools4ever