zoom-cobrowse-sdk

Hardcoded credentials detected. Passwords, API keys, and secrets should not be hardcoded in source code. Use environment variables or a secrets manager instead.

"token": "eyJhbGciOiJIUzI1NiIs..."

The skill instructs users to run 'npm install' without specifying version pins or integrity checks, which could lead to the installation of malicious or compromised packages.

npm install

Skill executes commands, writes files, or accesses the network but declares no allowed-tools, so its tool surface cannot be reviewed or constrained.

SKILL.md links to "concepts/jwt-authentication.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[JWT Authentication](concepts/jwt-authentication.md)

SKILL.md links to "concepts/session-lifecycle.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[Session Lifecycle](concepts/session-lifecycle.md)

SKILL.md links to "examples/agent-integration.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[Agent Integration](examples/agent-integration.md)

SKILL.md links to "examples/customer-integration.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[Customer Integration](examples/customer-integration.md)

SKILL.md links to "get-started.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[Get Started Guide](get-started.md)