setup-zoom-websockets
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides an informational link to a community GitHub repository (
just-zoomit/zoom-websockets) for a Node.js sample. This is a reference for developers and does not involve automated downloads or execution. - [DATA_EXFILTRATION]: The skill includes code snippets that process sensitive API credentials to authenticate with Zoom's official OAuth servers. All network operations within these examples are correctly targeted at legitimate Zoom domains (
zoom.us). - [COMMAND_EXECUTION]: The
RUNBOOK.mdfile contains standard shell commands for validating connectivity and authentication viacurl. These are intended for manual testing during development. - [PROMPT_INJECTION]: The skill defines a surface for processing external JSON data from Zoom events. While this is an ingestion point for untrusted data, the provided implementation focus is on meeting status updates and logging.
- Ingestion points: WebSocket event payloads parsed in
SKILL.mdandreferences/connection.md. - Boundary markers: None present in the reference code snippets.
- Capability inventory: The provided code demonstrates logging to the console and updating meeting status based on event types.
- Sanitization: The reference implementation uses standard JSON parsing without additional sanitization logic.
Audit Metadata