setup-zoom-marketplace-app

SUSPICIOUS: the skill's stated purpose is coherent, but its optional primary execution path routes sensitive app-management actions and possible credentials through a third-party MCP helper on a non-official domain. The capability belongs to the skill, yet the trust boundary and credential handling are disproportionate enough to make this a medium-high security risk rather than benign.