video-sdk/linux
Pass
Audited by Gen Agent Trust Hub on May 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External Software Sources: The documentation provides commands to fetch the CMake signing key from Kitware's official repository and references Zoom's official GitHub repositories for sample code. These are well-known sources within the developer community, used here to facilitate standard environment configuration.
- Administrative Privileges: The skill includes the use of
sudofor system package installation and for adjusting user group permissions to enable audio hardware access. These are routine administrative tasks required for setting up a Linux development environment and ensuring proper device interaction. - Data Ingestion Surface: The patterns for handling session data, such as participant names and chat messages, are documented to show how the SDK delivers this information via delegates. While these represent ingestion points for untrusted data, the skill follows standard SDK implementation patterns. Implementation of these patterns typically involves the bot processing data from session participants (ingestion points in
onChatNewMessageNotifyandonCommandReceived) with full application capabilities, which is a standard architectural characteristic of such integrations. - Secure Credential Handling: Code samples for generating session tokens use placeholders for sensitive keys and explicitly recommend server-side generation. This approach follows security best practices by avoiding the storage of hardcoded credentials within client-side application logic.
Audit Metadata