15Low
The skill performs unauthorized network operations and executes commands without declaring required tools, while relying on missing documentation that suggests potential runtime dependency on external, unverified sources.
HygienePackaging & Manifest6 findings
Skill Info
Nameanthropics/knowledge-work-plugins/zoom-apps-sdk
Registrygithub
Version4fc672a0eb8b
PURLpkg:github/anthropics/knowledge-work-plugins@4fc672a0eb8b?skill=zoom-apps-sdk
Stars22,195
Installs1,100
Source
Install
GitHub
1,100 installs
Skills.shDocs
npx skills add https://github.com/anthropics/knowledge-work-pluginsAssessments (3)
AI Agent Traps ↗Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "concepts/architecture.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Architecture](concepts/architecture.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "concepts/meeting-sdk-vs-zoom-apps.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Zoom Apps vs Meeting SDK](concepts/meeting-sdk-vs-zoom-apps.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "concepts/running-contexts.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Running Contexts](concepts/running-contexts.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "examples/in-client-oauth.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[In-Client OAuth](examples/in-client-oauth.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "examples/quick-start.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Quick Start](examples/quick-start.md)
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Outbound network request primitive in skill code — can transmit data externallylowdata exfiltrationAML.T0025AML.T0024LLM02:2025
Outbound network request primitive in skill code — can transmit data externally (seen 2 times in this file at lines 2, 11)
95% confidenceline 2
fetch('/api/auth/challenge')Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/anthropics/knowledge-work-plugins/zoom-apps-sdk)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/anthropics/knowledge-work-plugins/zoom-apps-sdk"><img src="https://mondoo.com/ai-agent-security/api/badge/github/anthropics/knowledge-work-plugins/zoom-apps-sdk.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/anthropics/knowledge-work-plugins/zoom-apps-sdk.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow