zoho-crm

SUSPICIOUS. The skill's capabilities largely match its Zoho CRM purpose, and there is no installer malware pattern. The main risk is data-flow integrity: users must send a Maton API key and all CRM traffic through Maton-controlled gateway/control services instead of Zoho's official API, giving a third party visibility and control over sensitive CRM operations. This is documented and same-org, so not outright malicious, but it materially expands trust and includes broad admin-capable actions.