zoom-mcp
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of potentially untrusted data from Zoom meeting transcripts, Team Chat messages, and Zoom Docs, which can serve as a vector for indirect prompt injection.
- Ingestion points: Untrusted data enters the agent context through tools such as
search_meetings,get_meeting_assets,search_zoom, andget_file_content(referenced inSKILL.mdandreferences/tools.md). - Boundary markers: The instructions do not specify the use of delimiters or provide 'ignore embedded instructions' warnings when the agent processes retrieved content.
- Capability inventory: The skill provides significant write capabilities, including
zoom_chat_message_send,zoom_chat_message_update(inteam-chat/SKILL.md), andcreate_new_file_with_markdown(inSKILL.md), which could be abused if an injection is successful. - Sanitization: No evidence of content sanitization or validation is provided for the data retrieved from external Zoom endpoints.
Audit Metadata