zoom-meeting-sdk-web-client-view
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Zoom CDN endpoints (
source.zoom.us) for loading required libraries (React, Redux, Lodash, and the Zoom Meeting SDK). These are well-known services provided by the vendor. - [COMMAND_EXECUTION]: Provides standard
npm installinstructions for the official@zoom/meetingsdkpackage, which is the expected method for integrating this SDK. - [DATA_EXPOSURE]: The skill uses placeholder variables such as
signature,meetingNumber,userName, andpassWord. It correctly identifies that sensitive values like thesignatureshould be generated by a backend service, aligning with security best practices for SDK authentication. - [INDIRECT_PROMPT_INJECTION]: While the skill handles user-controlled data such as
userNameandmessage(in thesendChatmethod), it functions as a developer guide for a UI component. The risk of prompt injection is mitigated by the underlying SDK's own handling of these inputs within the Zoom infrastructure.
Audit Metadata