zoho-analytics

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's capabilities match its stated Zoho Analytics integration purpose, and the CLI comes from an official npm package rather than an obviously untrusted source. However, the skill routes authentication, credentials, and data operations through Membrane instead of directly to Zoho, expanding trust to a third-party intermediary; combined with mutable `@latest` installs, this makes the skill medium risk rather than benign.

Confidence: 87%Severity: 59%
Audit Metadata
Analyzed At
Apr 30, 2026, 12:53 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-analytics%2F@631a59ad83c41f04788b5f395d1bc2f8df7156bd
Security Audit — socket — zoho-analytics