build-zoom-meeting-sdk-app

Savant verdict: Review advised

SkillSpector or the source hub flagged patterns to review before use.

Live evaluation

Not evaluated yet. Workspaces can request a live evaluation.

Safety (NVIDIA SkillSpector)

21 patterns found

• Rogue Agent: Create config file mkdir -p ~/.config cat > ~/.configmedium · linux/SKILL.md:256 · Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
• Rogue Agent: Create `~/.configmedium · linux/SKILL.md:396 · Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
• Rogue Agent: mkdir -p ~/.config && \ echo "[General]\nsystem.audio.type=default" > ~/.configmedium · linux/concepts/high-level-scenarios.md:388 · Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
• Data Exfiltration: https://api.zoom.us/medium · linux/meeting-sdk-bot.md:191 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
• Data Exfiltration: https://api.zoom.us/medium · linux/meeting-sdk-bot.md:214 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
• Data Exfiltration: https://api.zoom.us/medium · linux/meeting-sdk-bot.md:520 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
• Data Exfiltration: curl -X POST "https://api.zoom.us/v2/users/{userId}/meetings" \ -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \ -H "Content-Type: application/json" \ -dmedium · linux/meeting-sdk-bot.md:520 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
• Privilege Escalation: sudomedium · linux/references/linux-reference.md:69 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
• Privilege Escalation: sudomedium · linux/references/linux-reference.md:98 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
• Privilege Escalation: sudomedium · linux/references/linux-reference.md:451 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Structure

• Description is very shortA description that says when to use the skill helps agents route to it.
• 5 referenced files aren't in the packagereferences/full-guide.md, web/SKILL.md, windows/SKILL.md, references/signature-playbook.md, references/troubleshooting.md. They may be binary, too large to catalog, or missing upstream.
• No license declaredConfirm you may reuse this skill before importing it into your repository.

SKILL.md

---
name: build-zoom-meeting-sdk-app
description: Use when using Meeting SDK.
---

# Build Zoom Meeting SDK App

Use this skill when the user needs to join, start, or embed real Zoom meetings. If the user wants a fully custom non-meeting video experience, route to `build-zoom-video-sdk-app`.

## Workflow

1. Confirm product fit: Meeting SDK joins real Zoom meetings; Video SDK creates custom sessions; Zoom Apps SDK runs inside the Zoom client.
2. Choose the target platform: web, Android, iOS, macOS, Windows, Electron, React Native, Unreal, or Linux bot.
3. Validate the join or start path: meeting number, password, SDK signature, role, ZAK when hosting, waiting room behavior, and user identity.
4. Implement the smallest join flow first, then add meeting controls, custom UI, raw data, recording, or bot behavior.
5. Debug by isolating signature generation, SDK version, platform permissions, meeting settings, waiting room, raw data entitlement, and network constraints.

## References

- Full preserved guide: [references/full-guide.md](references/full-guide.md)
- Web: [web/SKILL.md](web/SKILL.md)
- Android: [android/SKILL.md](android/SKILL.md)
- iOS: [ios/SKILL.md](ios/SKILL.md)
- Windows: [windows/SKILL.md](windows/SKILL.md)
- Linux bots: [linux/SKILL.md](linux/SKILL.md)
- Signature playbook: [references/signature-playbook.md](references/signature-playbook.md)
- Troubleshooting: [references/troubleshooting.md](references/troubleshooting.md)