Zoho Books Automation

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities broadly match its Zoho Books automation purpose and the external service appears to be same-org Composio infrastructure, so this is not strong evidence of malware. However, it routes accounting data and OAuth through an intermediary MCP service and enables autonomous real-world financial actions, including invoice sending and destructive operations, which raises meaningful security and operational risk.

Confidence: 86%Severity: 63%
Audit Metadata
Analyzed At
May 1, 2026, 10:39 PM
Package URL
pkg:socket/skills-sh/ranbot-ai%2Fawesome-skills%2Fzoho-books-automation%2F@acd8e2b5b44636fd6009a3f03ed711bf4cd53656