catalyst-sdk
Warn
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation for the iOS SDK in
references/sdk-mobile.mdinstructs users to install a dependency from a personal GitHub repository (https://github.com/nicetomeetyou/ZCatalyst.git). This source is outside the official vendor organizations, making it an unverifiable dependency that could potentially serve compromised or malicious code to projects. - [EXTERNAL_DOWNLOADS]: Fetches library assets and configuration scripts from well-known Zoho domains, including
maven.zohodl.comandstatic.zohocdn.com, as part of the standard SDK setup process for Java, Android, and Web platforms.
Audit Metadata