zoom-rtms
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests live, user-generated meeting content (audio, video, transcript, chat) from Zoom via RTMS webhooks and media WebSockets (see examples/manual-websocket.md and examples/ai-integration.md where onTranscriptData/onChatData/onAudioData handlers consume and forward participant content to AI services), so untrusted third-party content is read and used to drive processing and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata