zoom-video-sdk-android

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFE
Full Analysis
  • Authentication Best Practices: The skill consistently advises that sensitive credentials like ZOOM_VIDEO_SDK_SECRET and the generation of JWT tokens should remain strictly on the backend/server side. This aligns with standard security protocols to prevent credential exposure in client-side applications.
  • Official Resource Usage: All external links point to established, official domains (e.g., developers.zoom.us and marketplacefront.zoom.us), which are used to provide the user with authoritative API references and documentation.
  • Illustrative Code Examples: The provided Kotlin code in examples/session-join-pattern.md is a static instructional snippet used to demonstrate the SDK implementation lifecycle. It does not perform any dynamic or hidden execution.
  • No Malicious Patterns Detected: A thorough review of the skill files revealed no evidence of prompt injection, data exfiltration, obfuscation, or persistence mechanisms. The skill operates within its stated purpose of being a developer guide.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 09:26 PM
Security Audit — agent-trust-hub — zoom-video-sdk-android