zendesk

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is internally consistent about being an Apideck proxy connector, but its actual data flow sends Zendesk traffic and delegated auth through Apideck instead of directly to Zendesk. No malware or install-chain indicators are present, yet the third-party credential and request mediation makes this higher-risk than a native Zendesk skill.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Sep 30, 2026, 06:36 PM
Package URL
pkg:socket/skills-sh/apideck-libraries%2Fapi-skills%2Fzendesk%2F@5a768557d05d6668d662344aab60268aecf28e912d3e8c292397c6e764b952fc