zoho-books

Integrates with Zoho Books API for managing invoices, contacts, and financial records using OAuth authentication.

Install this skill

62/100

Security score

The zoho-books skill was audited on Jun 8, 2026 and we found 34 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 594

Template literal with variable interpolation in command context

SourceSKILL.md

594	'Authorization': `Bearer ${process.env.MATON_API_KEY}`

low line 590

Fetch to external URL

SourceSKILL.md

590	const response = await fetch(

low line 594

Access to .env file

SourceSKILL.md

594	'Authorization': `Bearer ${process.env.MATON_API_KEY}`

low line 3

External URL reference

SourceSKILL.md

3	description: "Zoho Books API integration with managed OAuth. Manage invoices, contacts, bills, expenses, and other accounting data.\n Use this skill when users want to read, create, update, or delete

low line 16

External URL reference

SourceSKILL.md

16	req = urllib.request.Request('https://gateway.maton.ai/zoho-books/books/v3/contacts')

low line 25

External URL reference

SourceSKILL.md

25	https://gateway.maton.ai/zoho-books/books/v3/{endpoint}

low line 46

External URL reference

SourceSKILL.md

46	1. Sign in or create an account at [maton.ai](https://maton.ai)

low line 47

External URL reference

SourceSKILL.md

47	2. Go to [maton.ai/settings](https://maton.ai/settings)

low line 52

External URL reference

SourceSKILL.md

52	Manage your Zoho Books OAuth connections at `https://ctrl.maton.ai`.

low line 59

External URL reference

SourceSKILL.md

59	req = urllib.request.Request('https://ctrl.maton.ai/connections?app=zoho-books&status=ACTIVE')

low line 71

External URL reference

SourceSKILL.md

71	req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST')

low line 83

External URL reference

SourceSKILL.md

83	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}')

low line 97

External URL reference

SourceSKILL.md

97	"url": "https://connect.maton.ai/?session_token=...",

low line 111

External URL reference

SourceSKILL.md

111	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE')

low line 124

External URL reference

SourceSKILL.md

124	req = urllib.request.Request('https://gateway.maton.ai/zoho-books/books/v3/contacts')

low line 164

External URL reference

SourceSKILL.md

164	req = urllib.request.Request('https://gateway.maton.ai/zoho-books/books/v3/contacts')

low line 197

External URL reference

SourceSKILL.md

197	req = urllib.request.Request('https://gateway.maton.ai/zoho-books/books/v3/contacts/8527119000000099001')

low line 238

External URL reference

SourceSKILL.md

238	req = urllib.request.Request('https://gateway.maton.ai/zoho-books/books/v3/contacts', data=data, method='POST')

low line 281

External URL reference

SourceSKILL.md

281	req = urllib.request.Request('https://gateway.maton.ai/zoho-books/books/v3/contacts/8527119000000099001', data=data, method='PUT')

low line 299

External URL reference

SourceSKILL.md

299	req = urllib.request.Request('https://gateway.maton.ai/zoho-books/books/v3/contacts/8527119000000099001', method='DELETE')

low line 326

External URL reference

SourceSKILL.md

326	req = urllib.request.Request('https://gateway.maton.ai/zoho-books/books/v3/invoices')

low line 405

External URL reference

SourceSKILL.md

405	req = urllib.request.Request('https://gateway.maton.ai/zoho-books/books/v3/bills')

low line 461

External URL reference

SourceSKILL.md

461	req = urllib.request.Request('https://gateway.maton.ai/zoho-books/books/v3/expenses')

low line 591

External URL reference

SourceSKILL.md

591	'https://gateway.maton.ai/zoho-books/books/v3/contacts',

low line 608

External URL reference

SourceSKILL.md

608	'https://gateway.maton.ai/zoho-books/books/v3/contacts',

low line 659

External URL reference

SourceSKILL.md

659	req = urllib.request.Request('https://ctrl.maton.ai/connections')

low line 669

External URL reference

SourceSKILL.md

669	- Correct: `https://gateway.maton.ai/zoho-books/books/v3/contacts`

low line 670

External URL reference

SourceSKILL.md

670	- Incorrect: `https://gateway.maton.ai/books/v3/contacts`

low line 674

External URL reference

SourceSKILL.md

674	- [Zoho Books API v3 Introduction](https://www.zoho.com/books/api/v3/introduction/)

low line 675

External URL reference

SourceSKILL.md

675	- [Zoho Books Invoices API](https://www.zoho.com/books/api/v3/invoices/)

low line 676

External URL reference

SourceSKILL.md

676	- [Zoho Books Contacts API](https://www.zoho.com/books/api/v3/contacts/)

low line 677

External URL reference

SourceSKILL.md

677	- [Zoho Books Bills API](https://www.zoho.com/books/api/v3/bills/)

low line 678

External URL reference

SourceSKILL.md

678	- [Zoho Books Expenses API](https://www.zoho.com/books/api/v3/expenses/)

low line 679

External URL reference

SourceSKILL.md

679	- [Maton Community](https://discord.com/invite/dBfFAcefs2)

Scanned on Jun 8, 2026

View Security Dashboard

Installation guide →

GitHub Stars 15

Rate this skill

Categoryfinance accounting

UpdatedJune 15, 2026

openclaw api accountant financial-analyst cfo-fpa ap-ar-specialist tax-specialist finance accounting

dvcrn/openclaw-skills-marketplace