← Back to Skills Marketplace
shaharsha

Zoom Calendar

by shaharsh · GitHub ↗ · v1.1.0 · MIT-0
cross-platform ⚠ suspicious
808
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install zoom-calendar
Description
Create Zoom meetings and add them to Google Calendar events with proper conferenceData (icon, video entry, notes). Use when creating calendar events with Zoo...
Usage Guidance
This skill appears to do what it says: create a Zoom meeting and attach it to a Google Calendar event. Before installing, verify and store the Zoom Server-to-Server credentials file securely (or set ZOOM_CREDENTIALS to the correct path), confirm you are comfortable granting the gog CLI access to the Google account specified by GOG_ACCOUNT, and review the script if you want to ensure no additional behavior. Also confirm the script's default Zoom credentials path ($HOME/.openclaw/workspace/.credentials/zoom.json) matches where you keep the file or set ZOOM_CREDENTIALS to point at your actual .json. As always, limit the credentials you provide to least privilege and keep backups of any credentials you change.
Capability Analysis
Type: OpenClaw Skill Name: zoom-calendar Version: 1.1.0 The script `scripts/zoom_meeting.sh` is vulnerable to JSON injection because it manually constructs API payloads for Zoom and Google Calendar using unescaped shell variables (e.g., `TOPIC`, `EVENT_ID`). Additionally, the script exports sensitive Google OAuth tokens to a temporary file in `/tmp`, which could lead to credential exposure if the script is interrupted before the file is deleted. While the logic aligns with the stated purpose of meeting integration, these implementation flaws represent significant security vulnerabilities.
Capability Assessment
Purpose & Capability
Name/description (Zoom + Google Calendar) align with required env vars, CLI tools, and credential files. The script talks only to Zoom and Google endpoints and requires Zoom S2S credentials plus gog/Google OAuth, which is appropriate for the task. Minor inconsistency: metadata lists .credentials/zoom.json but the script defaults to $HOME/.openclaw/workspace/.credentials/zoom.json unless ZOOM_CREDENTIALS is set.
Instruction Scope
SKILL.md and the included bash script limit actions to creating a Zoom meeting, obtaining Google access tokens via gog, and PATCHing the specified calendar event's conferenceData. The script reads declared credential files and the two declared env vars, uses mktemp for a transient token file (deleted), and only calls zoom.us, oauth2.googleapis.com, and www.googleapis.com.
Install Mechanism
No install spec — instruction-only with an included script. No downloads or extraction from remote URLs. Risk is low because nothing is written to system paths besides a temporary token file that the script removes.
Credentials
Requested env vars (GOG_KEYRING_PASSWORD, GOG_ACCOUNT) are justified for gog/Google auth. The Zoom credentials are read from a file (configurable via ZOOM_CREDENTIALS) which is appropriate. Note the small mismatch between the metadata-declared credentials path and the script's default path; ensure your Zoom credentials are stored at the path the script expects or set ZOOM_CREDENTIALS.
Persistence & Privilege
always:false and the skill does not request persistent system-wide privileges or modify other skills. It requires permission to modify calendar events (expected). The agent-executable default is normal.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install zoom-calendar
  3. After installation, invoke the skill by name or use /zoom-calendar
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
zoom-calendar 1.1.0 - Expanded requirements: now explicitly lists extra required files (`$HOME/.config/gogcli/credentials.json`) and tools (`gog`, `jq`, `curl`, `base64`) in documentation and metadata. - Improved Google Calendar setup instructions, clarifying auth environment variables and credential management. - Updated metadata version and requirements for better transparency and onboarding.
v1.0.0
Initial release: Create Zoom meetings and add to Google Calendar with native conferenceData
Metadata
Slug zoom-calendar
Version 1.1.0
License MIT-0
All-time Installs 1
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Zoom Calendar?

Create Zoom meetings and add them to Google Calendar events with proper conferenceData (icon, video entry, notes). Use when creating calendar events with Zoo... It is an AI Agent Skill for Claude Code / OpenClaw, with 808 downloads so far.

How do I install Zoom Calendar?

Run "/install zoom-calendar" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Zoom Calendar free?

Yes, Zoom Calendar is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Zoom Calendar support?

Zoom Calendar is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Zoom Calendar?

It is built and maintained by shaharsh (@shaharsha); the current version is v1.1.0.

💬 Comments