zoho-salesiq

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is coherent as a Membrane-based integration helper, and the install source is official npm, so this is not malware-like. However, its real footprint routes Zoho SalesIQ authentication and data operations through Membrane instead of official Zoho APIs, creating third-party credential and data mediation that is disproportionate to a plain service integration guide.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Apr 29, 2026, 03:20 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-salesiq%2F@180bfca638cb1196a36b28f1dd86b698e75b0bc6