zoom-meeting-sdk-react-native
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- Indirect Prompt Injection Surface: The skill provides templates for joining and starting meetings that process user-supplied parameters such as
userNameandmeetingNumber. These inputs represent a surface where untrusted data enters the SDK execution flow. - Ingestion points: Parameters passed to the
joinMeetingandstartMeetingfunctions inexamples/join-meeting-pattern.mdandexamples/start-meeting-pattern.md. - Boundary markers: The code snippets do not explicitly demonstrate the use of delimiters or boundary instructions to prevent the interpretation of embedded content within these fields.
- Capability inventory: The skill leverages the Zoom Meeting SDK to perform network-based operations for real-time communication.
- Sanitization: The documentation does not detail specific sanitization or validation logic for the data before it is passed to the native bridge.
- External Dependency Management: The skill utilizes standard package management workflows to integrate official SDK resources from well-known registries.
- Evidence: Instructions in
examples/setup-guide.mdandreferences/android-setup.mdguide the installation of the@zoom/meetingsdk-react-nativeNode package and theus.zoom.meetingsdk:zoomsdkAndroid dependency from official sources.
Audit Metadata