skills/zoom/skills/zoom-oauth/Gen Agent Trust Hub

zoom-oauth

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical guide for implementing Zoom OAuth authentication. It contains documentation and code snippets for common authorization patterns.- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill does not contain hardcoded credentials or sensitive data access. It uses standard placeholders like {CLIENT_ID} and your_client_secret and recommends storing actual credentials in environment variables or secure databases.- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Node.js libraries including express, redis, and axios. All external links point to official Zoom documentation (zoom.us, developers.zoom.us) or the official Zoom GitHub organization, which are appropriate for the skill's stated purpose.- [PROMPT_INJECTION]: No malicious instructions, behavioral overrides, or safety filter bypass attempts were detected in the skill's instructions or metadata.- [OBFUSCATION]: The skill uses clear, technical language. No base64-encoded payloads, zero-width characters, homoglyphs, or other obfuscation techniques were identified.- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data from OAuth callbacks (such as codes and state parameters). It actively mitigates injection and forgery risks by demonstrating how to implement CSRF protection (state) and code exchange security (PKCE).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 10:24 AM