Savant verdict: Unsafe
SkillSpector recommends not installing this skill.
Live evaluation
Not evaluated yet. Workspaces can request a live evaluation.
Safety (NVIDIA SkillSpector)
Risk score
72/100
Recommendation
DO NOT INSTALL
Severity
HIGH
Savant decision
Blocked
SkillSpector recommends not installing this package. SkillSpector 2.12.0, static analysis.
10 patterns found
- analysis-evasion: examples/batch-webhook-pipeline.md (partial)high · SKILL.md:24 · Referenced artifact was not completely inspected
- Tool Misuse: DELETE /batch/jobs/:jobId`high · references/samples-validation.md:27 · Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
- Privilege Escalation: Access tokenhigh · troubleshooting/common-drift-and-breaks.md:15 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Data Exfiltration: curl -X POST https://api.zoom.us/v2/aiservices/scribe/jobs -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" -dmedium · examples/batch-webhook-pipeline.md:18 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Data Exfiltration: https://api.zoom.us/medium · examples/batch-webhook-pipeline.md:18 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Data Exfiltration: https://api.zoom.us/medium · examples/fast-mode-node.md:38 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Data Exfiltration: https://api.zoom.us/medium · examples/fast-mode-node.md:44 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Data Exfiltration: https://api.zoom.us/medium · references/api-reference.md:6 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Data Exfiltration: fetch('https://api.zoom.us/v2/aiservices/scribe/transcribe', { method: 'POST'medium · examples/fast-mode-node.md:38 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Data Exfiltration: fetch('https://api.zoom.us/v2/aiservices/scribe/transcribe', { method: 'POST'medium · examples/fast-mode-node.md:44 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Structure
- Description is very shortA description that says when to use the skill helps agents route to it.
- No license declaredConfirm you may reuse this skill before importing it into your repository.
SKILL.md
--- name: scribe description: Use when using Scribe. --- # Zoom AI Services Scribe Use this skill for Zoom Scribe transcription pipelines over uploaded or stored media. If the user needs live meeting media, compare against RTMS or Meeting SDK bot workflows first. ## Workflow 1. Confirm the media source, size, language, expected latency, and whether fast mode or batch mode fits. 2. Set up Build-platform credentials and JWT handling separately from application transcription logic. 3. Design ingestion, chunking, retries, webhook callbacks, and persistence before connecting downstream AI workflows. 4. Implement a minimal transcription request and response parser, then add batching and operational monitoring. 5. Debug by checking credential audience, processing mode, media format, file size, backend timeout, and webhook delivery. ## References - Full preserved guide: [references/full-guide.md](references/full-guide.md) - Auth and processing modes: [concepts/auth-and-processing-modes.md](concepts/auth-and-processing-modes.md) - High-level scenarios: [scenarios/high-level-scenarios.md](scenarios/high-level-scenarios.md) - Fast mode Node example: [examples/fast-mode-node.md](examples/fast-mode-node.md) - Batch webhook pipeline: [examples/batch-webhook-pipeline.md](examples/batch-webhook-pipeline.md) - API reference: [references/api-reference.md](references/api-reference.md) - Common drift and breaks: [troubleshooting/common-drift-and-breaks.md](troubleshooting/common-drift-and-breaks.md)