Security audit
Security checks for vulnerabilities and agentic risk
This Zoho Calendar skill is broad and includes automation reference material, but its sensitive behaviors are disclosed, scoped, and tied to user approval.
Before installing, understand that this skill can manage and delete Zoho Calendar data through your Maton-connected account and can set up persistent functions or triggers if you approve them. Use read-only actions first, confirm every write/delete/automation, keep trigger destinations on Maton-controlled hosts unless you explicitly trust another host, and do not expose Maton API keys or OAuth credentials.
The manifest states this is a Zoho Calendar integration for managing calendars and events, and explicitly says Zoho Calendar is not an event source. This file documents Gmail-triggered email event handling, including forwarding private correspondence, which is a separate capability not justified by the skill's stated calendar-management purpose.
The skill manifest says this skill is for Zoho Calendar calendar/event management and explicitly states Zoho Calendar is not an event source, while this file documents Linear event types, payloads, and trigger scoping. Although the file notes it is shared platform reference text, it still embeds actionable Linear trigger capabilities in the skill package, which does not match the skill's stated Zoho Calendar behavior.
No suspicious patterns detected.
