Savant verdict: Review advised
SkillSpector or the source hub flagged patterns to review before use.
Live evaluation
Not evaluated yet. Workspaces can request a live evaluation.
Safety (NVIDIA SkillSpector)
Risk score
30/100
Recommendation
CAUTION
Severity
MEDIUM
Savant decision
Review advised
SkillSpector rated it CAUTION with a risk score of 20/100 or more; review the findings before use. SkillSpector 2.12.0, static analysis.
2 patterns found
- analysis-evasion: references/subscriptions.md (partial)high · SKILL.md:23 · Referenced artifact was not completely inspected
- Data Exfiltration: https://api.zoom.us/medium · references/subscriptions.md:197 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Structure
- Description is very shortA description that says when to use the skill helps agents route to it.
- No license declaredConfirm you may reuse this skill before importing it into your repository.
SKILL.md
--- name: setup-zoom-webhooks description: Use when building Zoom webhooks. --- # Setup Zoom Webhooks Use this skill when the integration receives Zoom events over HTTP. If the user needs persistent low-latency event streams, compare against `setup-zoom-websockets`. ## Workflow 1. Identify the event types and resource scope before creating subscriptions. 2. Implement endpoint verification and signature verification before processing business logic. 3. Store raw event IDs, timestamps, and delivery metadata for replay protection and debugging. 4. Make handlers idempotent because Zoom can retry delivery. 5. Separate webhook ingestion from downstream API calls with a queue when reliability matters. 6. Debug by checking endpoint reachability, TLS, validation token handling, signature base string, app event subscription, and account-level settings. ## References - Full preserved guide: [references/full-guide.md](references/full-guide.md) - Signature verification: [references/signature-verification.md](references/signature-verification.md) - Subscriptions: [references/subscriptions.md](references/subscriptions.md) - Events: [references/events.md](references/events.md) - Common issues: [troubleshooting/common-issues.md](troubleshooting/common-issues.md)