skills/membranedev/application-skills/zoho-calendar/Socket

zoho-calendar

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose and capabilities mostly align, and the CLI install path appears officially documented via npm, but all Zoho access is mediated through Membrane rather than Zoho's official API. That third-party credential and data routing makes the skill materially riskier than a direct Zoho integration, though not clearly malicious.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Apr 30, 2026, 03:20 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-calendar%2F@1e51578b75c24600c72d96f458432fdf565124ed