skills/membranedev/application-skills/zoho-projects/Socket

zoho-projects

Warn

Audited by Socket on Apr 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's stated purpose fits its capabilities, and the CLI install path is legitimate. However, Zoho data and delegated auth are routed through Membrane's intermediary platform rather than directly to official Zoho APIs, creating a meaningful third-party trust and data-flow risk that is disproportionate for a straightforward SaaS integration.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Apr 3, 2026, 10:15 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-projects%2F@a364257fd9a4a2fdffec298c8ddc974ba59e1934