skills/membranedev/application-skills/zoho-workdrive/Socket

zoho-workdrive

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is plausible, and the CLI source appears legitimate, but the real integration path is a third-party Membrane broker rather than direct Zoho API use. The main risk is credential/data mediation through Membrane plus an unpinned CLI install, not confirmed malware.

Confidence: 83%Severity: 58%

Audit Metadata

Analyzed At

May 1, 2026, 11:41 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzoho-workdrive%2F@eb51b888416961822be27fff88e606f997cb3d23