build-zoom-video-sdk-app
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- External Resource References: The skill provides instructions for fetching SDK components from official Zoom infrastructure, such as
source.zoom.us. These are standard requirements for integrating the library and are delivered through official distribution channels. - Input Handling Considerations: Several code snippets demonstrate joining sessions using parameters like
userNameandtopic. If these variables are populated from untrusted external data without prior validation, it could represent a surface for indirect prompt injection, although the impact is limited by the SDK's functional boundaries. - Ingestion points: The
userNameandtopicparameters within theclient.joinmethod inSKILL.mdandreferences/ui-toolkit.md. - Boundary markers: No specific delimiters or "ignore" instructions are present in the code examples to distinguish between control tokens and user-provided data.
- Capability inventory: The skill facilitates network communication for video sessions and manages local media streams (camera/microphone).
- Sanitization: The provided examples show direct variable usage without explicit sanitization or validation logic.
Audit Metadata