pp-zoom
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires downloading a CLI tool from the @mvanhorn/printing-press-library package and the mvanhorn/printing-press-library GitHub repository. These downloads are associated with the tool's installation process.
- [REMOTE_CODE_EXECUTION]: The skill uses npx to download and execute code during the installation of the Zoom CLI, and provides instructions for go install from a remote repository.
- [COMMAND_EXECUTION]: The skill executes the zoom-pp-cli binary to perform its core functions, including searching recordings and managing meeting schedules. It also mentions installing an MCP server.
- [DATA_EXFILTRATION]: The CLI tool supports a --deliver webhook: flag, which allows the output of commands to be sent to a network address. The tool also accesses user directories like ~/Documents/Zoom for recording management.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it retrieves and processes content from Zoom transcripts, meeting summaries, and local PDF/DOCX files. Ingestion points: Fetches cloud transcripts via API and reads local files from the filesystem. Boundary markers: The instructions do not specify delimiters or warnings to ignore instructions embedded in the data. Capability inventory: The skill can perform shell command execution, file system access, and network delivery of data. Sanitization: No evidence of content sanitization for the ingested transcripts or notes.
Audit Metadata