setup-zoom-websockets
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- Secure Authentication Implementation: The skill provides clear guidance on implementing Zoom's Server-to-Server OAuth flow, demonstrating how to generate and refresh access tokens securely to maintain continuous integration without manual intervention.
- Credential Management Best Practices: The documentation emphasizes using environment variables for sensitive configuration values like Client IDs and Secrets, aligning with security best practices to prevent accidental exposure in source code.
- Verified Network Communication: All network operations, including OAuth token requests and WebSocket connections, are directed to official Zoom domains (zoom.us, api.zoom.us, and ws.zoom.us), ensuring that data is transmitted only to trusted infrastructure.
- Resilient Connection Patterns: The examples include robust logic for managing WebSocket lifecycles, such as implementing heartbeats (pings) to prevent connection timeouts and using exponential backoff for reconnection attempts during network disruptions.
- Standard Library Usage: The code samples utilize well-established and widely-used Node.js libraries, specifically 'axios' for HTTP requests and 'ws' for WebSocket communication, minimizing the risk associated with unvetted dependencies.
Audit Metadata