Savant verdict: Unsafe
SkillSpector recommends not installing this skill.
Live evaluation
Not evaluated yet. Workspaces can request a live evaluation.
Safety (NVIDIA SkillSpector)
Risk score
54/100
Recommendation
DO NOT INSTALL
Severity
HIGH
Savant decision
Blocked
SkillSpector recommends not installing this package. SkillSpector 2.12.0, static analysis.
24 patterns found
- Data Exfiltration: Send chathigh · linux/concepts/singleton-hierarchy.md:426 · Code or instructions that leak agent conversation context to external services, potentially exposing sensitive user interactions.
- Data Exfiltration: Send chathigh · linux/concepts/singleton-hierarchy.md:525 · Code or instructions that leak agent conversation context to external services, potentially exposing sensitive user interactions.
- Privilege Escalation: sudomedium · linux/SKILL.md:71 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- Privilege Escalation: sudomedium · linux/SKILL.md:72 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- Privilege Escalation: sudomedium · linux/SKILL.md:165 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- Privilege Escalation: sudomedium · linux/concepts/raw-data-vs-canvas.md:205 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- Privilege Escalation: sudomedium · linux/concepts/sdk-architecture-pattern.md:426 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- Privilege Escalation: sudomedium · linux/examples/session-join-pattern.md:11 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- Privilege Escalation: sudomedium · linux/examples/session-join-pattern.md:12 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- Privilege Escalation: sudomedium · linux/linux.md:75 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Structure
- Description is very shortA description that says when to use the skill helps agents route to it.
- 4 referenced files aren't in the packagereferences/full-guide.md, web/SKILL.md, windows/SKILL.md, references/session-lifecycle.md. They may be binary, too large to catalog, or missing upstream.
- No license declaredConfirm you may reuse this skill before importing it into your repository.
SKILL.md
--- name: build-zoom-video-sdk-app description: Use when using Video SDK. --- # Build Zoom Video SDK App Use this skill when the user needs a custom video session rather than a real Zoom meeting. If the user needs meeting numbers, waiting rooms, hosts, or normal Zoom meeting controls, route to Meeting SDK. ## Workflow 1. Confirm product fit: Video SDK is for custom sessions with app-owned UX and lifecycle. 2. Choose the target platform: web, Android, iOS, macOS, Windows, Linux, Flutter, React Native, Unity, or UI Toolkit. 3. Validate auth: generate Video SDK session tokens server-side and keep SDK credentials out of client code. 4. Implement join, media permissions, audio/video publish-subscribe, screen share, chat, and leave before advanced media features. 5. Add custom layouts, raw media, recording, live transcription, or storage integrations only after the session lifecycle is stable. 6. Debug by isolating token generation, SDK version, browser isolation, platform permissions, media device behavior, and entitlement limits. ## References - Full preserved guide: [references/full-guide.md](references/full-guide.md) - Web: [web/SKILL.md](web/SKILL.md) - Android: [android/SKILL.md](android/SKILL.md) - iOS: [ios/SKILL.md](ios/SKILL.md) - Windows: [windows/SKILL.md](windows/SKILL.md) - Linux: [linux/SKILL.md](linux/SKILL.md) - UI Toolkit: [../ui-toolkit/SKILL.md](../ui-toolkit/SKILL.md) - Session lifecycle: [references/session-lifecycle.md](references/session-lifecycle.md)