catalyst-by-zoho@0.0.2
VERIFIEDPublisher claims: "Official Claude Code plugin for Catalyst by Zoho — full-stack serverless cloud platform. With Skills that covers all services, SDKs, CLI, architecture patterns, pricing, migration guides, and Zoho MCP tool-based resource management." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry Claude Code plugin marketplacePublisher catalystbyzoho · joined 0 days agoInstalls 0Last detonated 1 h ago
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
File type combined with upload actionskills/catalyst-by-zoho/SKILL.md:121 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07HIGH
Authorization escalation languageskills/catalyst-functions/references/functions-templates.md:215 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01MEDIUM
File type combined with upload actionskills/catalyst-functions/SKILL.md:35 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07CRITICAL
Context shift attemptskills/catalyst-basics/references/cli.md:610 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01LOW
Unpinned dependencyhooks/catalyst-context.js:243 · Unpinned dependencyFix: Pin the exact version (`[email protected]`, `==1.2.3`) so every install gets the bytes that were reviewed.
AST06MEDIUM
File type combined with upload actionskills/catalyst-functions/SKILL.md:3 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07LOW
Unpinned dependencyhooks/catalyst-context.js:262 · Unpinned dependencyFix: Pin the exact version (`[email protected]`, `==1.2.3`) so every install gets the bytes that were reviewed.
AST06