zoho-bigin

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities match its CRM purpose, and there is no malware-like installer or hidden execution. However, it requires routing API keys and all CRM traffic through Maton intermediary services instead of Zoho's official API, creating meaningful third-party trust and data-flow risk; the endpoint inconsistency and referral to another skill add to that concern.

Confidence: 89%Severity: 68%
Audit Metadata
Analyzed At
Sep 4, 2026, 01:53 PM
Package URL
pkg:socket/skills-sh/craftos-dev%2Fcraftbot%2Fzoho-bigin%2F@82cd3e181dc785d6c8924f5d60aa375bdc8733b369fd80580ed41352b627b174
Security Audit — socket — zoho-bigin