zoom-video-sdk
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation includes references to official Zoom assets and packages hosted on trusted domains, such as
source.zoom.usfor Web SDK binaries andgithub.com/zoom/*for sample applications and libraries. These are standard distribution channels for the vendor's software. - [COMMAND_EXECUTION]: The integration guides provide standard shell commands for environment setup, such as installing system dependencies using package managers (
apt,npm,bun) and configuring system services like PulseAudio for Linux environments. These commands are necessary for the development and execution of applications using the SDK. - [DATA_EXFILTRATION]: No indicators of unauthorized data access or exfiltration were detected. The skill correctly instructs developers to manage sensitive credentials, such as the Video SDK Secret, in secure server-side environments and to use short-lived authentication tokens (JWT) for client-side authorization.
- [SAFE]: The skill is entirely educational and technical in nature, intended for developers building custom video applications. It does not contain any malicious code, prompt injection patterns, or attempts to bypass security controls. All code snippets provided are standard implementation patterns for the Zoom Video SDK.
Audit Metadata