zoom-general
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a primary entry point and router for Zoom integrations, offering clear guidance on choosing between various SDKs and APIs based on user requirements.
- [EXTERNAL_DOWNLOADS]: The skill fetches necessary SDKs and assets from Zoom's official domains (e.g., zoom.us, marketplace.zoom.us). These are trusted vendor resources associated with the skill's author.
- [EXTERNAL_DOWNLOADS]: Integration examples reference well-known and reputable third-party services including AWS, Google Cloud, OpenAI, and Deepgram for storage and AI processing.
- [COMMAND_EXECUTION]: The documentation includes instructions for a local Python-based forum triage tool (
thread_triage.py). This is presented as a developer utility within the skill's repository for processing local data files. - [DATA_EXFILTRATION]: The skill provides patterns for transferring meeting recordings and transcripts to user-controlled storage (e.g., S3 buckets). These operations are part of the skill's intended functionality and are secured using standard OAuth and AWS IAM practices.
- [PROMPT_INJECTION]: The skill utilizes a classification and routing layer to interpret developer intent. It contains no instructions that attempt to bypass safety filters or override agent behavior.
- [SAFE]: Best practices for secret management are enforced, with instructions to store sensitive credentials like
ZOOM_CLIENT_SECRETandZOOM_WEBHOOK_SECRETin environment variables rather than hardcoding them.
Audit Metadata