The skill is vulnerable to Server-Side Request Forgery (SSRF) due to unvalidated user-supplied URLs and contains multiple broken documentation links, indicating poor implementation and security hygiene.
Skill Info
Install
npx skills add https://github.com/anthropics/knowledge-work-pluginsAssessments (2)
AI Agent Traps ↗The manual implementation guide uses `server_urls` provided directly from the webhook payload to initialize a WebSocket connection, which could be exploited for SSRF if the payload is tampered with.
const signalingWs = new WebSocket(server_urls);
User input is used to construct a URL for a server-side HTTP request. This could allow an attacker to make requests to internal services or cloud metadata endpoints (Server-Side Request Forgery). Validate URLs against an allowlist of permitted hosts and schemes.
taint source (line 17): req.body → sink: new WebSocket(server_urls)
SKILL.md links to "concepts/connection-architecture.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[Connection Architecture](concepts/connection-architecture.md)
SKILL.md links to "examples/manual-websocket.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[Manual WebSocket](examples/manual-websocket.md)
SKILL.md links to "examples/rtms-bot.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[RTMS Bot](examples/rtms-bot.md)
SKILL.md links to "examples/sdk-quickstart.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[SDK Quickstart](examples/sdk-quickstart.md)
SKILL.md links to "references/media-types.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[Media Types](references/media-types.md)
Skill does not specify a license field. Specifying a license helps users understand usage terms.
Version History (2)
Badge
[](https://mondoo.com/ai-agent-security/skills/github/anthropics/knowledge-work-plugins/zoom-rtms)<a href="https://mondoo.com/ai-agent-security/skills/github/anthropics/knowledge-work-plugins/zoom-rtms"><img src="https://mondoo.com/ai-agent-security/api/badge/github/anthropics/knowledge-work-plugins/zoom-rtms.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/anthropics/knowledge-work-plugins/zoom-rtms.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet, discover and control Shadow AI usage.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow