build-zoom-rest-api-app

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • Architectural Reference: The skill provides a robust foundation for building Zoom integrations, covering critical topics such as regional base URLs, numeric Meeting IDs versus UUIDs, and mandatory double-encoding for specific identifiers.
  • Secure Authentication Guidance: It emphasizes the deprecation of JWT app types and provides clear implementations for Server-to-Server OAuth. The inclusion of token management examples in Node.js and Python encourages proper handling of credentials and session lifetimes.
  • Operational Reliability: Detailed documentation on rate-limiting categories (Light, Medium, Heavy) and strategies for handling 429 errors—such as exponential backoff with jitter and proactive throttling—supports the development of stable production applications.
  • Event-Driven Integration: The skill offers high-quality examples for webhook server implementation, specifically addressing mandatory security requirements like Challenge-Response Check (CRC) validation and HMAC signature verification to ensure data integrity.
  • Canonical Resource Mapping: The reference section includes exhaustive endpoint inventories for over 30 Zoom product domains, including Meetings, Users, Phone, and AI Companion, all aligned with official OpenAPI specifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:17 AM
Security Audit — agent-trust-hub — build-zoom-rest-api-app