catalyst-appsail
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Provides instructions for using the official Zoho Catalyst CLI to deploy services, specifically through the
catalyst deploy appsailandcatalyst appsail:addcommands. These commands are standard for the vendor's platform operations. - [EXTERNAL_DOWNLOADS]: References official vendor packages including
zcatalyst-cli(installed via npm) and thezcatalyst-sdk-nodelibrary for Node.js development. These are recognized as legitimate vendor resources for the 'catalystbyzoho' author. - [DATA_EXFILTRATION]: Includes a code template for a Node.js server that interacts with the Catalyst database using ZCQL queries. This is provided as a reference for users to build their own backend logic and does not contain malicious exfiltration patterns.
- [CREDENTIALS_UNSAFE]: Mentions environment variables and configuration files (app-config.json) with placeholders like 'your-key-here'. It correctly advises users to manage secrets via environment variables rather than hardcoding them.
Audit Metadata