build-zoom-video-sdk-app

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Resource References: The skill provides instructions for fetching SDK components from official Zoom infrastructure, such as source.zoom.us. These are standard requirements for integrating the library and are delivered through official distribution channels.
  • Input Handling Considerations: Several code snippets demonstrate joining sessions using parameters like userName and topic. If these variables are populated from untrusted external data without prior validation, it could represent a surface for indirect prompt injection, although the impact is limited by the SDK's functional boundaries.
  • Ingestion points: The userName and topic parameters within the client.join method in SKILL.md and references/ui-toolkit.md.
  • Boundary markers: No specific delimiters or "ignore" instructions are present in the code examples to distinguish between control tokens and user-provided data.
  • Capability inventory: The skill facilitates network communication for video sessions and manages local media streams (camera/microphone).
  • Sanitization: The provided examples show direct variable usage without explicit sanitization or validation logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:16 AM