skills/membranedev/application-skills/zoho-catalyst/Socket

zoho-catalyst

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is coherent and uses same-org, official-looking npm distribution, so it is not overtly malicious. However, all Zoho authentication and API traffic are funneled through Membrane as a third-party intermediary, which creates medium data-flow and trust risk that exceeds a direct Zoho integration.

Confidence: 87%Severity: 52%

Audit Metadata

Analyzed At

May 1, 2026, 11:42 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-catalyst%2F@e22e352463c8fb8150d6f308ff36531dd5beb228