Zoho Books Automation
Warn
Audited by Socket on May 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities broadly match its Zoho Books automation purpose and the external service appears to be same-org Composio infrastructure, so this is not strong evidence of malware. However, it routes accounting data and OAuth through an intermediary MCP service and enables autonomous real-world financial actions, including invoice sending and destructive operations, which raises meaningful security and operational risk.
Confidence: 86%Severity: 63%
Audit Metadata