← 返回 Skills 市场
808
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install zoom-calendar
功能描述
Create Zoom meetings and add them to Google Calendar events with proper conferenceData (icon, video entry, notes). Use when creating calendar events with Zoo...
安全使用建议
This skill appears to do what it says: create a Zoom meeting and attach it to a Google Calendar event. Before installing, verify and store the Zoom Server-to-Server credentials file securely (or set ZOOM_CREDENTIALS to the correct path), confirm you are comfortable granting the gog CLI access to the Google account specified by GOG_ACCOUNT, and review the script if you want to ensure no additional behavior. Also confirm the script's default Zoom credentials path ($HOME/.openclaw/workspace/.credentials/zoom.json) matches where you keep the file or set ZOOM_CREDENTIALS to point at your actual .json. As always, limit the credentials you provide to least privilege and keep backups of any credentials you change.
功能分析
Type: OpenClaw Skill
Name: zoom-calendar
Version: 1.1.0
The script `scripts/zoom_meeting.sh` is vulnerable to JSON injection because it manually constructs API payloads for Zoom and Google Calendar using unescaped shell variables (e.g., `TOPIC`, `EVENT_ID`). Additionally, the script exports sensitive Google OAuth tokens to a temporary file in `/tmp`, which could lead to credential exposure if the script is interrupted before the file is deleted. While the logic aligns with the stated purpose of meeting integration, these implementation flaws represent significant security vulnerabilities.
能力评估
Purpose & Capability
Name/description (Zoom + Google Calendar) align with required env vars, CLI tools, and credential files. The script talks only to Zoom and Google endpoints and requires Zoom S2S credentials plus gog/Google OAuth, which is appropriate for the task. Minor inconsistency: metadata lists .credentials/zoom.json but the script defaults to $HOME/.openclaw/workspace/.credentials/zoom.json unless ZOOM_CREDENTIALS is set.
Instruction Scope
SKILL.md and the included bash script limit actions to creating a Zoom meeting, obtaining Google access tokens via gog, and PATCHing the specified calendar event's conferenceData. The script reads declared credential files and the two declared env vars, uses mktemp for a transient token file (deleted), and only calls zoom.us, oauth2.googleapis.com, and www.googleapis.com.
Install Mechanism
No install spec — instruction-only with an included script. No downloads or extraction from remote URLs. Risk is low because nothing is written to system paths besides a temporary token file that the script removes.
Credentials
Requested env vars (GOG_KEYRING_PASSWORD, GOG_ACCOUNT) are justified for gog/Google auth. The Zoom credentials are read from a file (configurable via ZOOM_CREDENTIALS) which is appropriate. Note the small mismatch between the metadata-declared credentials path and the script's default path; ensure your Zoom credentials are stored at the path the script expects or set ZOOM_CREDENTIALS.
Persistence & Privilege
always:false and the skill does not request persistent system-wide privileges or modify other skills. It requires permission to modify calendar events (expected). The agent-executable default is normal.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zoom-calendar - 安装完成后，直接呼叫该 Skill 的名称或使用
/zoom-calendar触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
zoom-calendar 1.1.0
- Expanded requirements: now explicitly lists extra required files (`$HOME/.config/gogcli/credentials.json`) and tools (`gog`, `jq`, `curl`, `base64`) in documentation and metadata.
- Improved Google Calendar setup instructions, clarifying auth environment variables and credential management.
- Updated metadata version and requirements for better transparency and onboarding.
v1.0.0
Initial release: Create Zoom meetings and add to Google Calendar with native conferenceData
元数据
常见问题
Zoom Calendar 是什么？
Create Zoom meetings and add them to Google Calendar events with proper conferenceData (icon, video entry, notes). Use when creating calendar events with Zoo... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 808 次。
如何安装 Zoom Calendar？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zoom-calendar」即可一键安装，无需额外配置。
Zoom Calendar 是免费的吗？
是的，Zoom Calendar 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Zoom Calendar 支持哪些平台？
Zoom Calendar 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Zoom Calendar？
由 shaharsh（@shaharsha）开发并维护，当前版本 v1.1.0。
推荐 Skills