zoho-salesiq
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is coherent as a Membrane-based integration helper, and the install source is official npm, so this is not malware-like. However, its real footprint routes Zoho SalesIQ authentication and data operations through Membrane instead of official Zoho APIs, creating third-party credential and data mediation that is disproportionate to a plain service integration guide.
Confidence: 86%Severity: 64%
Audit Metadata