zoho-people
Fail
Audited by Socket on Mar 12, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill presents a coherent purpose: to manage Zoho People data via a managed Maton gateway with an API-key-based authentication flow. The overall data flow is plausible and aligns with a proxy-based integration. However, there are notable risk signals related to external gateway trust boundaries, credential handling through environment variables, and potential exposure through additional intermediaries. With proper governance of the gateway, strict logging controls, and scoped access to connections, the footprint is acceptable for a managed integration, but it remains suspicious until vetted for gateway trust, secret management, and per-operation scoping.
Confidence: 98%
Audit Metadata