zoho-people
Warn
Audited by Socket on Sep 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose matches HR API access, but it routes sensitive Zoho People data and credentials through Maton's managed gateway instead of direct Zoho APIs. That proxying can be legitimate and is publisher-consistent, but the undocumented gateway/ctrl subdomains and intermediary credential/data flow make the skill higher risk than a direct official integration.
Confidence: 87%Severity: 58%
Audit Metadata