zoom-webhooks
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No instructions were found that attempt to override AI behavior, bypass safety filters, or extract system prompts.\n- [DATA_EXFILTRATION]: No hardcoded secrets or unauthorized data transmission patterns were detected. The skill correctly instructs users to store credentials in environment variables and provides templates for secure HMAC verification.\n- [EXTERNAL_DOWNLOADS]: The skill provides links to official Zoom repositories and community-maintained samples for reference. It does not contain code that automatically downloads or executes these external resources.\n- [REMOTE_CODE_EXECUTION]: Code snippets use standard libraries (express, axios) for legitimate purposes. There are no patterns involving the execution of untrusted remote content or the use of dangerous dynamic execution functions.\n- [SAFE]: The skill provides secure boilerplate code for handling Zoom events, including validation of the x-zm-signature header and replay attack prevention using timestamps. It also properly addresses the endpoint URL validation challenge required by the Zoom platform.
Audit Metadata