zoho-desk

Warn

Audited by Socket on May 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities are mostly aligned, and the CLI install source appears official. The main concern is data flow integrity: all Zoho Desk access is mediated by Membrane rather than direct Zoho API calls, so user data and auth context are entrusted to a third-party platform. This is proportionate to the skill's stated Membrane-based design, but it is still a meaningful trust and privacy expansion beyond a direct Zoho integration.

Confidence: 82%Severity: 54%
Audit Metadata
Analyzed At
May 2, 2026, 01:43 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-desk%2F@a88781b64e9545d73b128de8f892f73f568d49d4
Security Audit — socket — zoho-desk