zoom-general
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an informational resource and orchestration hub for Zoom platform integrations. It contains no executable malicious code.
- Evidence: SKILL.md implements a classifier to route developer queries to appropriate sub-skills based on detected product signals.
- Evidence: Use-case files provide legitimate architectural patterns and code examples for authenticated Zoom service interactions.
- [SAFE]: All external references and dependencies originate from the official vendor or established third-party services.
- Evidence: URLs target official Zoom domains (zoom.us, zoom.com, developers.zoom.us) and GitHub repositories (github.com/zoom/).
- Evidence: Example code snippets utilize official vendor npm packages (e.g., @zoom/meetingsdk, @zoom/videosdk).
- [SAFE]: Security best practices are consistently demonstrated in implementation examples.
- Evidence: Authentication examples use environment variables for secrets and demonstrate server-side signature generation.
- Evidence: Webhook handling includes HMAC signature verification and URL validation challenge responses.
- [SAFE]: No unauthorized data access, persistence mechanisms, or privilege escalation patterns were found.
- Evidence: There are no attempts to access sensitive system files, modify shell profiles, or execute commands with elevated privileges.
Audit Metadata