zoom-mcp

SUSPICIOUS. The core skill is largely coherent and routes data to official Zoom-owned MCP and OAuth endpoints, but it documents an optional OAuth callback flow through webhook.site, a known interception service, which is disproportionate for handling sensitive auth codes. No malware or hidden execution is present, but the credential-handling guidance introduces meaningful security risk.