ui-toolkit/web
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- Official Package Dependencies: The skill recommends installing
@zoom/videosdk-zoom-ui-toolkitandjsrsasignvia standard package managers. These are established libraries required for video conferencing and JWT signing functionality. - Trusted External Resources: All external links, including CDN assets (
source.zoom.us) and documentation, point to official Zoom domains and public GitHub repositories. These are well-known services and represent safe, expected integrations for this toolkit. - Diagnostic Command Examples: The
RUNBOOK.mdfile containscurlcommands designed for manual troubleshooting of the developer's own API endpoints. These are informative examples for verification and do not involve automated execution or data exfiltration. - Credential Security Guidance: The documentation explicitly identifies sensitive environment variables such as
ZOOM_VIDEO_SDK_SECRETand provides clear instructions to maintain them server-side. This guidance helps users avoid common pitfalls like exposing credentials in client-side code.
Audit Metadata