zoho-people

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose matches HR API access, but it routes sensitive Zoho People data and credentials through Maton's managed gateway instead of direct Zoho APIs. That proxying can be legitimate and is publisher-consistent, but the undocumented gateway/ctrl subdomains and intermediary credential/data flow make the skill higher risk than a direct official integration.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 4, 2026, 01:53 PM
Package URL
pkg:socket/skills-sh/craftos-dev%2Fcraftbot%2Fzoho-people%2F@4e2d5d0fa9d6974aae2c143d16aeac67003a2eefd93f74a391a8294fec8d13e9
Security Audit — socket — zoho-people