meeting-sdk/linux
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- Use of Placeholders for Sensitive Data: The skill uses clear placeholders such as 'YOUR_JWT_TOKEN' and 'abc123' in configuration templates (config.txt, config.json), which prevents accidental exposure of real credentials while teaching proper configuration management.
- Trusted External Resource Integration: All external links point to official Zoom documentation, Marketplace domains, and public GitHub repositories owned by Zoom. Additionally, OS-level dependencies are fetched from reputable sources such as Ubuntu's official security repositories.
- Standard Development Workflows: The provided Dockerfiles, CMake configurations, and shell scripts (e.g., PulseAudio setup) use standard system commands (apt-get, yum, system) required for building and running C++ applications on Linux. These are used strictly within the context of the skill's functionality.
- Adherence to Least Privilege: The skill correctly identifies and highlights the necessary Zoom admin entitlements and user permissions required for raw data access, ensuring developers are aware of the security and privacy controls inherent in the SDK.
- Secure Environment Variable Usage: For production environments, the skill recommends loading sensitive parameters and bot configurations from environment variables, which is a secure practice compared to hardcoding values in source code.
Audit Metadata