zoom-mcp/team-chat

Warn

Audited by Snyk on Aug 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). In the zoom-mcp/team-chat required workflow, the agent can use the Zoom Team Chat MCP tools like zoom_chat_messages_fetch/zoom_chat_messages_search/zoom_chat_channel_get_by_id to read outsider-authored chat content from the caller’s Zoom Team Chat sessions/channels at runtime, meaning free text written by other users could be ingested by the LLM without selecting a specific pre-vetted item.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 26, 2026, 09:55 PM
Issues
1
Security Audit — snyk — zoom-mcp/team-chat