70High
The skill is vulnerable to Server-Side Request Forgery (SSRF) due to unvalidated user-supplied URLs and contains multiple broken documentation links, indicating poor implementation and security hygiene.
HygienePackaging & Manifest6 findings
Skill Info
Nameanthropics/knowledge-work-plugins/zoom-rtms
Registrygithub
Version55447a28e6c7
PURLpkg:github/anthropics/knowledge-work-plugins@55447a28e6c7?skill=zoom-rtms
Stars21,418
Installs986
Source
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
984 installs
Skills.shDocs
npx skills add https://github.com/anthropics/knowledge-work-pluginsAssessments (2)
AI Agent Traps ↗Potential for SSRF via webhook payloadhighcommand executionAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
The manual implementation guide uses `server_urls` provided directly from the webhook payload to initialize a WebSocket connection, which could be exploited for SSRF if the payload is tampered with.
90% confidenceline 195
const signalingWs = new WebSocket(server_urls);
User input is used to construct a URL for a server-side HTTP request. This could allow an attacker to make requests to internal services or cloud metadata endpoints (Server-Side Request Forgery). Validate URLs against an allowlist of permitted hosts and schemes.highvulnAML.T0053AML.T0049LLM06:2025LLM05:2025
User input is used to construct a URL for a server-side HTTP request. This could allow an attacker to make requests to internal services or cloud metadata endpoints (Server-Side Request Forgery). Validate URLs against an allowlist of permitted hosts and schemes.
95% confidenceline 30
taint source (line 17): req.body → sink: new WebSocket(server_urls)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "concepts/connection-architecture.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Connection Architecture](concepts/connection-architecture.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "examples/manual-websocket.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Manual WebSocket](examples/manual-websocket.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "examples/rtms-bot.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[RTMS Bot](examples/rtms-bot.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "examples/sdk-quickstart.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[SDK Quickstart](examples/sdk-quickstart.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/media-types.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Media Types](references/media-types.md)
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/anthropics/knowledge-work-plugins/zoom-rtms)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/anthropics/knowledge-work-plugins/zoom-rtms"><img src="https://mondoo.com/ai-agent-security/api/badge/github/anthropics/knowledge-work-plugins/zoom-rtms.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/anthropics/knowledge-work-plugins/zoom-rtms.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow