zoho-mail

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Zoho Mail skill is coherently aligned with its stated purpose: it uses the Membrane CLI to create and manage a Zoho Mail connection and perform actions via Membrane's proxy, with authentication handled server-side by Membrane. Install sources (npm registry) are legitimate, and credentials are not exposed in the skill itself but managed through Membrane's flow. Data flows from the user to Zoho Mail through Membrane, which is appropriate for a managed integration. Overall, the footprint is benign and proportionate to the described capability, with moderate risk associated with dependency on an external CLI and remote API calls handled via a proxy.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 05:02 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-mail%2F@63d9ecd628166459882e9cda440a665b29019adb