zoho-analytics
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's capabilities match its stated Zoho Analytics integration purpose, and the CLI comes from an official npm package rather than an obviously untrusted source. However, the skill routes authentication, credentials, and data operations through Membrane instead of directly to Zoho, expanding trust to a third-party intermediary; combined with mutable `@latest` installs, this makes the skill medium risk rather than benign.
Confidence: 87%Severity: 59%
Audit Metadata