Skip to main content

scribe

Facilitates transcription workflows for Zoom AI Services, enabling efficient audio and video file transcription with JWT authentication.

Install this skill

or
66/100

Security score

The scribe skill was audited on May 22, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 22

Webhook reference - potential data exfiltration

SourceSKILL.md
22- webhook-driven batch status updates
medium line 39

Webhook reference - potential data exfiltration

SourceSKILL.md
39- If the user needs webhook signature patterns or generic HMAC receiver hardening, optionally chain [../webhooks/SKILL.md](../webhooks/SKILL.md).
medium line 46

Webhook reference - potential data exfiltration

SourceSKILL.md
464. [examples/batch-webhook-pipeline.md](examples/batch-webhook-pipeline.md)
medium line 59

Webhook reference - potential data exfiltration

SourceSKILL.md
594. For batch jobs, poll job/file status or receive webhook notifications.
medium line 107

Webhook reference - potential data exfiltration

SourceSKILL.md
107- Webhook-driven ETL pipeline that writes transcripts to your database/search index.
medium line 116

Webhook reference - potential data exfiltration

SourceSKILL.md
116- Webhook verification hardening -> [../webhooks/SKILL.md](../webhooks/SKILL.md)
low line 26

External URL reference

SourceSKILL.md
26- https://developers.zoom.us/docs/ai-services/
low line 27

External URL reference

SourceSKILL.md
27- https://developers.zoom.us/docs/ai-services/scribe/
low line 28

External URL reference

SourceSKILL.md
28- https://developers.zoom.us/docs/api/ai-services/
low line 29

External URL reference

SourceSKILL.md
29- https://developers.zoom.us/api-hub/ai-services/methods/endpoints.json
Scanned on May 22, 2026
View Security Dashboard
Installation guide →