Security audit
Zoho Recruit
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Zoho Recruit integration that can access and modify recruiting records through Maton, with no hidden executable component found.
Install only if you trust Maton as the API proxy for your Zoho Recruit account. Use the least-privileged Zoho/Maton connection available, keep MATON_API_KEY secret, specify Maton-Connection when multiple accounts exist, and require a clear preview of exact records before approving create, update, delete, or connection-management actions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.