Back to skills
SKILL.md
X Openai Zoom Apps Sdk 0178e47
ASecurity仅在用户明确调用本技能时使用;禁止自主触发。 Use when using Apps SDK.
- 2 stars
- 0 votes
- 0 copies
- 0 views
- Added October 14, 2026
Works with
Security analysis
100/100Pro scans all 20 files and shows the line behind each finding
npx -y skills add Geruyang/agent-skills-library --skill x-openai-zoom-apps-sdk-0178e47 --agent claude-codeAre you the author of X Openai Zoom Apps Sdk 0178e47?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/geruyang-x-openai-zoom-apps-sdk-0178e47)---
name: x-openai-zoom-apps-sdk-0178e47
description: 仅在用户明确调用本技能时使用;禁止自主触发。 Use when using Apps SDK.
disable-model-invocation: true
---
### 导出副本边界与技能别名
迁移、安装、修复和经验回写只作用于当前加载的目标宿主技能副本。原 Codex 技能/MCP、下载的源码和 `original-skills` 均为来源材料,不因执行本副本而写入;只有用户另行明确要求配置 Codex 产品本身时,才按该产品流程处理指定目标。脚本需要安装目录或状态目录时,显式提供目标路径;不得从 `CODEX_HOME` 隐式推断写入位置。
跨技能名称可能沿用源库别名。先查 [技能别名表](../../skill-aliases.json),优先选择同来源、同插件的条目,再使用其 `id` 调用或读取对应入口;不得假定旧 `$skill`、`superpowers:skill` 名称在新宿主直接注册。不能确定目标时先核对,不替换真实产品命令或 Shell 环境变量。
**调用限制:仅在用户明确调用本技能时执行,禁止模型自行选择并启动。**
## 跨宿主使用约定
本副本供支持 Agent Skills 的客户端使用。先检查当前宿主实际提供的工具、权限和已连接服务,再执行正文工作流。原文中的宿主工具标识是能力参考;只有实际发现该工具时才可调用,其他宿主应使用经核验的等价 MCP、CLI 或 API。没有等价能力的步骤必须报告不可用,不能虚构调用或完成状态。
技能资源以本技能目录为基准;输出写入当前项目中用户指定的位置。通过技能名称或自然语言触发,具体快捷命令由宿主决定。涉及真实产品、模型 API、协议字段和官方网址的名称保持原意。授权、审批、隐私和工具范围限制在迁移后仍然有效;不得为兼容而扩大权限。具体依赖与迁移说明见同目录 `PORTABILITY.md`。
# Zoom Apps SDK
Use this skill when the app runs inside the Zoom client. If the user only needs to embed a meeting in an external app, route to Meeting SDK instead.
## Workflow
1. Confirm the running context: meeting, webinar, main client, phone, collaborate mode, immersive mode, camera mode, or Layers API.
2. Configure Marketplace app settings, allowed domains, redirect URIs, and in-client OAuth before implementing SDK calls.
3. Initialize `zoomSdk` and gate features by capability and running context.
4. Design client communication and data flow: frontend SDK calls, backend REST calls, in-client OAuth tokens, and webhook handoff.
5. Implement advanced client features only after the base app loads reliably: Layers API, breakout rooms, guest mode, collaborate mode, or ZMail.
6. Debug blank panels, domain allowlist issues, CSP, missing capabilities, running-context mismatch, and OAuth redirect problems independently.
## References
- Full preserved guide: [references/full-guide.md](references/full-guide.md)
- Architecture: [concepts/architecture.md](concepts/architecture.md)
- Running contexts: [concepts/running-contexts.md](concepts/running-contexts.md)
- Meeting SDK versus Zoom Apps: [concepts/meeting-sdk-vs-zoom-apps.md](concepts/meeting-sdk-vs-zoom-apps.md)
- Layers API: [references/layers-api.md](references/layers-api.md)
- In-client OAuth: [examples/in-client-oauth.md](examples/in-client-oauth.md)
- Common issues: [troubleshooting/common-issues.md](troubleshooting/common-issues.md)
Files in this skill
- PORTABILITY.md
- PORTABILITY_REVIEW.json
- RUNBOOK.md
- SKILL.md
- agents/openai.yaml
- concepts/architecture.md
- concepts/meeting-sdk-vs-zoom-apps.md
- concepts/running-contexts.md
- concepts/security.md
- examples/app-communication.md
- examples/breakout-rooms.md
- examples/collaborate-mode.md
- examples/guest-mode.md
- examples/in-client-oauth.md
- examples/layers-camera.md
- examples/layers-immersive.md
- examples/quick-start.md
- references/apis.md
- references/environment-variables.md
- references/events.md
Attribution
Comments
Loading comments…
Newsletter
Get the weekly list of safe new skills, and the ones we pulled.