rivet-sdk
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for the Zoom Rivet SDK, providing architectural context and implementation patterns.
- [EXTERNAL_DOWNLOADS]: The skill references official Zoom developer documentation (developers.zoom.us, zoom.github.io) and public Zoom GitHub repositories (github.com/zoom/*). These are verified vendor resources belonging to the skill author.
- [CREDENTIALS_UNSAFE]: The documentation correctly identifies necessary authentication secrets (e.g., client IDs and secrets) but uses placeholders such as '...' and 'replace-me' in all examples, following security best practices for documentation.
- [PROMPT_INJECTION]: Analysis of the instructional content and code examples found no evidence of prompt injection attempts, safety filter bypasses, or instruction overrides.
- [COMMAND_EXECUTION]: The provided JavaScript code snippets focus on SDK initialization and API interaction; they do not contain any unsafe shell command executions or subprocess spawning.
Audit Metadata