CatalogOpenAI Codex Plugins · OpenAI

setup-zoom-websockets

Use when building Zoom WebSockets.

UnsafeOfficial7.5k stars

Savant verdict: Unsafe

SkillSpector recommends not installing this skill.

Live evaluation

Not evaluated yet. Workspaces can request a live evaluation.

Safety (NVIDIA SkillSpector)

Risk score
73/100
Recommendation
DO NOT INSTALL
Severity
HIGH
Savant decision
Blocked
SkillSpector recommends not installing this package. SkillSpector 2.12.0, static analysis.

14 patterns found

  • Privilege Escalation: access tokenhigh · RUNBOOK.md:31 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
  • Privilege Escalation: access tokenhigh · references/full-guide.md:14 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
  • Privilege Escalation: access tokenhigh · troubleshooting/common-issues.md:9 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
  • Privilege Escalation: Access tokenhigh · RUNBOOK.md:53 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
  • Privilege Escalation: Access tokenhigh · troubleshooting/common-issues.md:16 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
  • analysis-evasion: references/connection.md (partial)high · SKILL.md:22 · Referenced artifact was not completely inspected
  • analysis-evasion: references/events.md (partial)high · SKILL.md:23 · Referenced artifact was not completely inspected
  • Privilege Escalation: access tokenhigh · references/connection.md:8 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
  • Privilege Escalation: access tokenhigh · references/connection.md:21 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
  • Privilege Escalation: access tokenhigh · references/connection.md:106 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Structure

  • Description is very shortA description that says when to use the skill helps agents route to it.
  • No license declaredConfirm you may reuse this skill before importing it into your repository.

SKILL.md

---
name: setup-zoom-websockets
description: Use when building Zoom WebSockets.
---

# Setup Zoom WebSockets

Use this skill when the integration needs persistent Zoom event delivery instead of HTTP webhook callbacks. If normal webhook retries and delivery are enough, prefer `setup-zoom-webhooks`.

## Workflow

1. Confirm WebSockets are justified by latency, firewall, connection model, or deployment constraints.
2. Configure the app and event subscriptions for the required event stream.
3. Implement connection setup, authentication, heartbeat, reconnect, backoff, and shutdown handling.
4. Normalize events into the same internal contract used by webhook handlers when both are supported.
5. Add observability for connection state, reconnect count, event lag, and dropped messages.
6. Debug by isolating token/auth problems, app subscription settings, network proxies, TLS interception, and reconnect loops.

## References

- Full preserved guide: [references/full-guide.md](references/full-guide.md)
- Connection: [references/connection.md](references/connection.md)
- Events: [references/events.md](references/events.md)
- Common issues: [troubleshooting/common-issues.md](troubleshooting/common-issues.md)