Security audit
zoho-projects
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Zoho Projects integration that uses Maton OAuth/CLI access with clear safeguards for credential handling and write operations.
Before installing, understand that this skill can modify or delete Zoho Projects data after you authorize access through Maton. Use OAuth where possible, approve only the Zoho account and scopes needed, specify the intended connection when multiple accounts exist, and carefully review any proposed write or delete operation before confirming.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.