zoho-assist

SUSPICIOUS: the skill's purpose is plausible, but its actual footprint is a Membrane-mediated Zoho Assist integration rather than a direct Zoho Assist skill. Install source is relatively legitimate (official npm package), so this is not strong malware evidence, but routing auth and all actions through a third-party intermediary is a meaningful trust and data-flow concern.