sales-fourfour
What this skill does
A tool for interacting with the Four/Four platform, providing access to customer insights, conversations, and CRM data via APIs such as OData, CRM Importer, and MCP server.
github/sales-skills - Privilege Escalation - 89 stars
Threat analysis
Skill info
pkg:github/sales-skills/sales@01ed049?skill=sales-fourfourAssessments (2)
Privilege Escalation
Privilege Escalation via local-llm-review
references/fourfour-api-reference.md
OAuth2 authorization-code flow with refresh tokens is used to authenticate OData API requests. The token endpoint is `https://fourfour.ai/oauth/token` and the supported scope is `api:read`.Obfuscation
Obfuscation via local-llm-review
SKILL.md
The skill description mentions the use of an MCP server (`fourfour.ai/mcp`) for integration with Claude/Cursor, which could be a point of obfuscation or hidden functionality.Badge
Add the Anomity scan badge for sales-fourfour to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of sales-fourfour? Report an issue or request a rescan.
