15Low
The skill performs unauthorized network operations and executes commands without declaring required tools, while relying on missing documentation that obscures its runtime behavior and data handling practices.
HygienePackaging & Manifest6 findings
Skill Info
Nameanthropics/knowledge-work-plugins/build-zoom-video-sdk-app
Registrygithub
Version4fc672a0eb8b
PURLpkg:github/anthropics/knowledge-work-plugins@4fc672a0eb8b?skill=build-zoom-video-sdk-app
Stars22,195
Installs1,100
Source
Install
GitHub
1,100 installs
Skills.shDocs
npx skills add https://github.com/anthropics/knowledge-work-pluginsAssessments (3)
AI Agent Traps ↗Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "RUNBOOK.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[5-Minute Runbook](RUNBOOK.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/session-lifecycle.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[references/session-lifecycle.md](references/session-lifecycle.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/triage-intake.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[references/triage-intake.md](references/triage-intake.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/ui-toolkit.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[references/ui-toolkit.md](references/ui-toolkit.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "web/references/web.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[web/references/web.md](web/references/web.md)
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Outbound network request primitive in skill code — can transmit data externallylowdata exfiltrationAML.T0025AML.T0024LLM02:2025
Outbound network request primitive in skill code — can transmit data externally
95% confidenceline 2
fetch('/api/signature', { ... })Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/anthropics/knowledge-work-plugins/build-zoom-video-sdk-app)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/anthropics/knowledge-work-plugins/build-zoom-video-sdk-app"><img src="https://mondoo.com/ai-agent-security/api/badge/github/anthropics/knowledge-work-plugins/build-zoom-video-sdk-app.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/anthropics/knowledge-work-plugins/build-zoom-video-sdk-app.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow