zoho-analytics

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose is plausible and the CLI install path is reasonably legitimate, but the actual integration is mediated by Membrane rather than direct Zoho APIs. That makes credentials and API traffic depend on a third-party intermediary, which is a material trust and data-flow risk even though there is no clear evidence of outright malware.

Confidence: 84%Severity: 63%
Audit Metadata
Analyzed At
Apr 2, 2026, 12:46 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-analytics%2F@8e88529584f6b98a55884782465b7bcf965e0861