zoom-meeting-sdk-react-native

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Indirect Prompt Injection Surface: The skill provides templates for joining and starting meetings that process user-supplied parameters such as userName and meetingNumber. These inputs represent a surface where untrusted data enters the SDK execution flow.
  • Ingestion points: Parameters passed to the joinMeeting and startMeeting functions in examples/join-meeting-pattern.md and examples/start-meeting-pattern.md.
  • Boundary markers: The code snippets do not explicitly demonstrate the use of delimiters or boundary instructions to prevent the interpretation of embedded content within these fields.
  • Capability inventory: The skill leverages the Zoom Meeting SDK to perform network-based operations for real-time communication.
  • Sanitization: The documentation does not detail specific sanitization or validation logic for the data before it is passed to the native bridge.
  • External Dependency Management: The skill utilizes standard package management workflows to integrate official SDK resources from well-known registries.
  • Evidence: Instructions in examples/setup-guide.md and references/android-setup.md guide the installation of the @zoom/meetingsdk-react-native Node package and the us.zoom.meetingsdk:zoomsdk Android dependency from official sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:05 PM
Security Audit — agent-trust-hub — zoom-meeting-sdk-react-native