virtual-agent
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Zoom SDK hosted on Zoom's content delivery network (https://us01ccistatic.zoom.us). This is a well-known service and the script is necessary for the skill's functionality.\n- [EXTERNAL_DOWNLOADS]: References are provided to official Zoom sample repositories on GitHub (github.com/zoom). These are trusted organizations and repositories.\n- [SAFE]: The skill correctly instructs users to manage sensitive credentials such as API keys and OAuth secrets through environment variables rather than hardcoding them. It uses appropriate placeholders like YOUR_API_KEY for demonstration.\n- [SAFE]: The native bridge implementations for Android and iOS use standard platform APIs (addJavascriptInterface and WKUserContentController) to facilitate communication between the WebView and the host application in a secure, controlled manner.
Audit Metadata