skills/zoom/skills/contact-center/web/Gen Agent Trust Hub

contact-center/web

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents the integration of the Zoom Contact Center Web SDK. It provides implementation examples for engagement lifecycle management and event handling using official Zoom SDK methods.
  • [EXTERNAL_DOWNLOADS]: The documentation describes loading the Zoom Campaign SDK script as part of the integration process. These scripts are official vendor resources intended for contact center functionality and do not originate from untrusted sources.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles an attack surface where external engagement data is ingested via SDK APIs like getEngagementContext and events such as onEngagementContextChange. The provided examples demonstrate local state management and UI rendering for this data without chaining it to dangerous operations such as arbitrary command execution or file system writes.
  • Ingestion points: Engagement context and status data are ingested via zoomSdk.callZoomApi and event listeners (examples/app-context-and-state.md).
  • Boundary markers: Not explicitly defined in the logic snippets.
  • Capability inventory: Logic is limited to internal state storage (Map) and UI rendering functions; no file-writing or network-exfiltration capabilities are documented in the scripts.
  • Sanitization: Standard SDK usage is described; specific input sanitization is left to the developer implementing the SDK.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 09:55 PM
Security Audit — agent-trust-hub — contact-center/web