javafx-ui

SUSPICIOUS. The skill’s stated JavaFX purpose is benign, but its actual install path is inconsistent with official JavaFX distribution channels. The main risk is supply-chain trust: users may install an unrelated npm package under a trusted framework name. No credential access, exfiltration, or overtly malicious behavior is shown.