Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add iblai/enterprise-agents --skill zoomgit clone --depth 1 https://github.com/iblai/enterprise-agentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/iblai/enterprise-agents/zoom)<a href="https://agentmods.dev/skills/iblai/enterprise-agents/zoom"><img src="https://agentmods.dev/badge/skills/iblai/enterprise-agents/zoom/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/iblai/enterprise-agents/zoom"><img src="https://agentmods.dev/badge/skills/iblai/enterprise-agents/zoom.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00031 | $0.00541 |
| Opus 5 | $0.00015 | $0.00270 |
| Sonnet 5 | $0.00006 | $0.00108 |
| Haiku 4.5 | $0.00003 | $0.00054 |
Grade A, and why
zoom scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 38 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Zoom
What it is
Zoom is the dominant enterprise video conferencing platform, used across organizations for internal meetings, customer calls, and all-hands events. In this segment the meeting agent uses Zoom to fetch recording links, retrieve auto-generated transcripts, and pull participant metadata so it can generate meeting summaries and extract action items without requiring manual upload of recordings.
When to use this skill
- Retrieving the cloud recording URL and transcript for a completed meeting
- Listing recent meetings for a user to identify which ones need recaps
- Fetching participant join/leave times and attendance duration for a meeting report
- Checking whether a recording has finished processing before attempting to retrieve the transcript
- Pulling meeting topic, host, and scheduled time for calendar context enrichment
Credentials
This skill authenticates using variables from ~/.openclaw/.env (template: .env.example at the config root). Required variables:
ZOOM_ACCOUNT_ID- Zoom account ID (from Server-to-Server OAuth app)ZOOM_CLIENT_ID- OAuth app client IDZOOM_CLIENT_SECRET- OAuth app client secret
Key operations
POST /oauth/token?grant_type=account_credentials- obtain access token via Server-to-Server OAuthGET /v2/users/{userId}/recordings- list cloud recordings for a userGET /v2/meetings/{meetingId}/recordings- get recording files and transcript download URLsGET /v2/report/meetings/{meetingId}/participants- get participant reportGET /v2/users/{userId}/meetings?type=previous_meetings- list past meetings
Notes
- Use Server-to-Server OAuth (not JWT, which was deprecated in June 2023) for production integrations.
- Auto-generated transcripts require the "Audio Transcript" setting to be enabled in the Zoom account admin.
- Transcript download URLs are pre-signed and time-limited; download and process immediately.
- Cloud recordings are deleted after the account's retention period (default 30 days); check before fetching.
- Rate limits: 30 requests/second per token; recording endpoints have lower sub-limits. Implement exponential backoff.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 38 lines · 31 tokens per session scan A 9bace041e2c9
zoom is a skill published in the GitHub repository iblai/enterprise-agents (11 stars, last pushed 3mo ago), licensed MIT. It adds 31 tokens to every session and 541 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
timeboxed-iterating
Run a task iteratively over a user-specified duration by dispatching subagents. The orchestrator stays strictly linear and time-checked, but each iteration fans out MULTIPLE subagents in parallel over independent units (and those subagents may fan out further). Shared state — a compact progress digest and a growing…
find-plugin-file
This skill should be used when needing to locate files within the Claude Code plugins cache directory (/.claude/plugins/cache). Triggers include finding tool scripts, skill files, or any plugin resource when the hardcoded path is unknown or varies by plugin version. Use when slash commands or orchestrators need to…
tmux-layout
Use this skill when the operator wants a prepared tmux visualization layout for the session's side-channels (STATE.md tail, CI-watch, events.jsonl tail). Renders a 4-pane default layout or debug layout. Read-only side-channel observability — the coordinator chat stays in the operator's original terminal. Trigger…
agent-teams
Multi-agent team orchestration with native Agent Teams. Trigger when the user wants to launch a team of agents, coordinate parallel work with inter-agent communication, or use swarm mode.
usage-guard
Arm proactive 5-hour usage protection for long Claude Code sessions (batch, subagents, high window % at start). Daemon reads account-level 5-hour window usage (not per-session). User types /usage-guard at session start. Re-arm every sitting. If user mentions usage-guard by name, read this file and run arm.sh.
schedule
Use when scheduling recurring cron jobs or one-shot background notifications.