catalyst-sdk

Warn

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation for the iOS SDK in references/sdk-mobile.md instructs users to install a dependency from a personal GitHub repository (https://github.com/nicetomeetyou/ZCatalyst.git). This source is outside the official vendor organizations, making it an unverifiable dependency that could potentially serve compromised or malicious code to projects.
  • [EXTERNAL_DOWNLOADS]: Fetches library assets and configuration scripts from well-known Zoho domains, including maven.zohodl.com and static.zohocdn.com, as part of the standard SDK setup process for Java, Android, and Web platforms.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 16, 2026, 11:14 AM
Security Audit — agent-trust-hub — catalyst-sdk