probe-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- Media and Device Access: The skill describes the use of standard browser APIs to request camera and microphone permissions and to enumerate hardware devices. These operations are fundamental to the SDK's purpose of validating user hardware and are subject to standard browser-level security prompts and user consent.\n- Dynamic Resource Loading: The SDK supports loading its probing engine via optional JavaScript and WebAssembly assets from configurable URLs. The documentation provides best-practice guidance by recommending that these assets be hosted on the developer's own trusted infrastructure and pinned to specific versions to ensure code integrity.\n- Network Diagnostic Operations: The skill outlines how to perform network quality assessments, which involve established communication with diagnostic endpoints such as zoom.us. This network activity is a necessary function for measuring connectivity readiness before media sessions.\n- Secure Secret Management: The reference materials emphasize that core diagnostics do not require sensitive Zoom Marketplace credentials or OAuth tokens. This design choice minimizes the risk of credential exposure in client-side diagnostic environments.
Audit Metadata