Skills zoho-crm-automation
๐Ÿ“ฆ

zoho-crm-automation

Content revision r2 Medium Risk โš™๏ธ External commands๐ŸŒ Network access

Automate Zoho CRM Records and Lead Workflows

Manual CRM updates consume time and can introduce inconsistent data. This skill guides Claude, Codex, and Claude Code through Zoho workflows using Rube MCP.

Supports: Claude Codex Code(CC)
๐Ÿ“Š 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "zoho-crm-automation" from https://skillstore.io/skills/sickn33-zoho-crm-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-zoho-crm-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "zoho-crm-automation". Find the contact with email alex@example.com and return the name and phone.

Expected outcome:

Found one contact: Alex Morgan. Phone: +1 555 010 4420. No records were changed.

Using "zoho-crm-automation". Prepare a lead for Priya Shah at Northwind using priya@example.com.

Expected outcome:

No matching lead was found. The required fields are ready for review, and creation is waiting for confirmation.

Using "zoho-crm-automation". Convert lead 4100000123456 and create a deal worth 15000.

Expected outcome:

Conversion preview: one Contact, one Account, and one 15000 deal. The irreversible action is waiting for explicit confirmation.

Security Audit

Medium Risk
v5 โ€ข 9/7/2026 Open versioned report

All external-command alerts are Markdown false positives, and the reconnaissance alert describes a Zoho record ID. Rube MCP is a real third-party network dependency, while CRM mutations lack an explicit confirmation requirement.

1
Files scanned
216
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
CRM Mutations Lack Explicit Confirmation
The instructions call create, update, and lead-conversion tools without requiring a preview or user confirmation, although lead conversion is explicitly irreversible.
The documented sequences proceed directly to mutating tools, and line 109 states that lead conversion is irreversible. No confirmation requirement appears in the workflow.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
The setup explicitly directs users to connect the external Rube MCP endpoint. This creates an intentional third-party network and OAuth trust boundary for CRM operations.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-zoho-crm-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-zoho-crm-automation/security.svg)](https://skillstore.io/skills/sickn33-zoho-crm-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-zoho-crm-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-zoho-crm-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-zoho-crm-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

sickn33. (2026). zoho-crm-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-zoho-crm-automation/audits/5

BibTeX citation

@techreport{sickn33-sickn33-zoho-crm-automation-2026, author = {sickn33}, title = {zoho-crm-automation security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-zoho-crm-automation/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "zoho-crm-automation security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-09-07" url: "https://skillstore.io/skills/sickn33-zoho-crm-automation/audits/5" identifiers: - type: other value: "skillstore:sickn33-zoho-crm-automation:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Qualify Incoming Leads

Search existing leads, create missing records, and prepare validated lead conversions.

Maintain Customer Records

Find contacts and accounts, then apply precise field updates using verified record IDs.

Standardize CRM Operations

Discover module schemas, manage tags, and maintain relationships across configured modules.

Try These Prompts

Find a Contact
Verify the Zoho connection and search Contacts for email {{email}}. Return {{fields}} without changing any records.
Prepare a New Lead
Discover required Lead fields and check for {{email}}. Prepare a lead from {{lead_details}}, then ask before creating it.
Update a Deal
Find the Deal matching {{criteria}} and show its ID and current {{fields}}. Update only {{changes}} after I confirm.
Convert a Qualified Lead
Find {{lead_identifier}}, validate Contact, Account, and Deal mappings, and preview outcomes. Convert the lead only after explicit confirmation.

Best Practices

  • Call RUBE_SEARCH_TOOLS and inspect current schemas before every workflow.
  • Search for existing records and confirm record IDs before writes.
  • Preview changes and require explicit confirmation before creation, updates, or lead conversion.

Avoid

  • Do not use display labels when Zoho requires field API names.
  • Do not update a record selected only by a broad or ambiguous search.
  • Do not convert leads without reviewing mappings and confirming the irreversible action.

Frequently Asked Questions

Does this skill require a Zoho API key?
Rube MCP handles the connection flow, but you must authorize Zoho through OAuth.
Which Zoho records can it manage?
It supports modules exposed by your Zoho permissions and the available Rube tools.
Can it prevent duplicate records?
No. Search for matches before creation and rely on configured Zoho duplicate rules.
Does it support bulk operations?
The guidance focuses on individual and paginated operations. Bulk work must respect plan limits and current tool schemas.
Can lead conversion be undone?
No. Zoho lead conversion is irreversible, so review mappings and confirm before execution.
Why should tools and fields be discovered first?
Schemas can change. Discovery confirms required fields, API names, and available actions.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

b1ef80115e869b66867d4eac8e3c8dc56a393a8d

Maintenance freshness

9/7/2026

Usage

12 downloads ยท 216 views

File structure

๐Ÿ“„ SKILL.md

More from sickn33

View all
View all