zoho-invoice

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a Zoho Invoice integration, and its install path is relatively trustworthy, but its actual data flow depends on Membrane as an intermediary for authentication and API proxying instead of direct Zoho API use. That third-party credential and data routing is the main risk and makes the trust footprint broader than a typical direct-service integration.

Confidence: 89%Severity: 63%
Audit Metadata
Analyzed At
Apr 28, 2026, 10:55 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-invoice%2F@da437b052d6de97de915d5a2c19ed2e7f98007a5
Security Audit — socket — zoho-invoice