skills/membranedev/application-skills/zoho-creator/Socket

zoho-creator

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is coherent with its stated Zoho Creator purpose and uses an official same-vendor CLI from npm, so it is not overtly malicious. However, it requires routing authentication and data operations through Membrane rather than directly to Zoho, creating moderate third-party trust, credential-handling, and external-action risk.

Confidence: 86%Severity: 52%

Audit Metadata

Analyzed At

Apr 30, 2026, 06:50 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-creator%2F@daad8e822a4edc1846cb3aec78a0572cf8af687b