zoom-automation

Pass

Audited by Gen Agent Trust Hub on Apr 23, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection due to its interaction with untrusted external data.
  • Ingestion points: The agent ingests data from the Zoom API via tools like ZOOM_LIST_MEETINGS, ZOOM_LIST_ALL_RECORDINGS, and ZOOM_GET_PAST_MEETING_PARTICIPANTS (SKILL.md).
  • Boundary markers: No specific delimiters or boundary markers are defined to help the agent distinguish between data and instructions.
  • Capability inventory: The skill has powerful capabilities including creating meetings (ZOOM_CREATE_A_MEETING), modifying settings (ZOOM_UPDATE_A_MEETING), and deleting cloud recordings (ZOOM_DELETE_MEETING_RECORDINGS) (SKILL.md).
  • Sanitization: The instructions do not specify any sanitization, validation, or escaping of the data retrieved from Zoom before it is processed.
  • [EXTERNAL_DOWNLOADS]: The skill documentation references an external endpoint for tool configuration.
  • Evidence: Users are instructed to add https://rube.app/mcp as an MCP server in their client configuration (SKILL.md).
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 23, 2026, 11:09 AM