skills/zoom/skills/zoom-general/Gen Agent Trust Hub

zoom-general

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a primary entry point and router for Zoom integrations, offering clear guidance on choosing between various SDKs and APIs based on user requirements.
  • [EXTERNAL_DOWNLOADS]: The skill fetches necessary SDKs and assets from Zoom's official domains (e.g., zoom.us, marketplace.zoom.us). These are trusted vendor resources associated with the skill's author.
  • [EXTERNAL_DOWNLOADS]: Integration examples reference well-known and reputable third-party services including AWS, Google Cloud, OpenAI, and Deepgram for storage and AI processing.
  • [COMMAND_EXECUTION]: The documentation includes instructions for a local Python-based forum triage tool (thread_triage.py). This is presented as a developer utility within the skill's repository for processing local data files.
  • [DATA_EXFILTRATION]: The skill provides patterns for transferring meeting recordings and transcripts to user-controlled storage (e.g., S3 buckets). These operations are part of the skill's intended functionality and are secured using standard OAuth and AWS IAM practices.
  • [PROMPT_INJECTION]: The skill utilizes a classification and routing layer to interpret developer intent. It contains no instructions that attempt to bypass safety filters or override agent behavior.
  • [SAFE]: Best practices for secret management are enforced, with instructions to store sensitive credentials like ZOOM_CLIENT_SECRET and ZOOM_WEBHOOK_SECRET in environment variables rather than hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 12:43 PM