Savant verdict: Unsafe
SkillSpector recommends not installing this skill.
Live evaluation
Not evaluated yet. Workspaces can request a live evaluation.
Safety (NVIDIA SkillSpector)
Risk score
92/100
Recommendation
DO NOT INSTALL
Severity
CRITICAL
Savant decision
Blocked
SkillSpector recommends not installing this package. SkillSpector 2.12.0, static analysis.
60 patterns found
- Privilege Escalation: access tokenhigh · references/authentication.md:26 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: access tokenhigh · references/authorization-patterns.md:64 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: access tokenhigh · references/authorization-patterns.md:109 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: access tokenhigh · references/authorization-patterns.md:138 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: access tokenhigh · references/meeting-webhooks-oauth-refresh-orchestration.md:44 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: Access Tokenhigh · references/authentication.md:48 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: access tokenhigh · use-cases/backend-automation-s2s-oauth.md:198 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: access tokenhigh · use-cases/meeting-details-with-events.md:103 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: access tokenhigh · use-cases/meeting-details-with-events.md:139 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: access tokenhigh · use-cases/meeting-details-with-events.md:582 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Structure
- Description is very shortA description that says when to use the skill helps agents route to it.
- No license declaredConfirm you may reuse this skill before importing it into your repository.
SKILL.md
--- name: zoom-general description: Use when comparing products. --- # Zoom General Use this skill for cross-product platform context after the user’s goal is understood. For first-step routing, prefer `start`, `plan-zoom-product`, or `plan-zoom-integration`. ## Workflow 1. Classify the job by outcome: embed meetings, custom video, automate resources, consume events, process media, use meeting intelligence, or publish a Marketplace app. 2. Choose the Zoom surface that owns the behavior: REST API, webhooks, WebSockets, Meeting SDK, Video SDK, Zoom Apps SDK, Phone, Contact Center, Virtual Agent, Scribe, Rivet, or Cobrowse. 3. Confirm auth and scope model before implementation; Zoom surfaces differ on user-level OAuth, account-level OAuth, and SDK signatures. 4. Route to the narrow skill once the surface is chosen rather than keeping broad guidance in context. 5. Use the preserved guide only when a task crosses product boundaries or needs detailed comparison tables. ## References - Full preserved guide: [references/full-guide.md](references/full-guide.md) - App types: [references/app-types.md](references/app-types.md) - Authentication: [references/authentication.md](references/authentication.md) - Scopes: [references/scopes.md](references/scopes.md) - Marketplace: [references/marketplace.md](references/marketplace.md) - Query routing playbook: [references/query-routing-playbook.md](references/query-routing-playbook.md)