zoom-rtms
Warn
Audited by Snyk on Apr 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly ingests live, user-generated meeting content (transcripts, chat, audio/video) from Zoom via RTMS webhooks and media WebSockets — see SKILL.md and examples/manual-websocket.md and examples/ai-integration.md where transcript/chat data are read and sent to AI services — so untrusted third‑party content could indirectly inject instructions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata