zoom-automation
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection due to its interaction with untrusted external data.
- Ingestion points: The agent ingests data from the Zoom API via tools like
ZOOM_LIST_MEETINGS,ZOOM_LIST_ALL_RECORDINGS, andZOOM_GET_PAST_MEETING_PARTICIPANTS(SKILL.md). - Boundary markers: No specific delimiters or boundary markers are defined to help the agent distinguish between data and instructions.
- Capability inventory: The skill has powerful capabilities including creating meetings (
ZOOM_CREATE_A_MEETING), modifying settings (ZOOM_UPDATE_A_MEETING), and deleting cloud recordings (ZOOM_DELETE_MEETING_RECORDINGS) (SKILL.md). - Sanitization: The instructions do not specify any sanitization, validation, or escaping of the data retrieved from Zoom before it is processed.
- [EXTERNAL_DOWNLOADS]: The skill documentation references an external endpoint for tool configuration.
- Evidence: Users are instructed to add
https://rube.app/mcpas an MCP server in their client configuration (SKILL.md).
Audit Metadata