zoom-apps-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [Official SDK Integration]: The skill documents the use of the @zoom/appssdk library and its global initialization pattern via CDN or NPM. These are standard procedures for integrating with the Zoom platform.
- [Authorization and Secret Management]: The documentation provides implementation examples for In-Client OAuth with PKCE and handles sensitive information like client secrets and access tokens using server-side storage and environment variables, which aligns with security best practices.
- [Security Header Guidance]: The skill includes instructions for implementing mandatory OWASP security headers, such as Content Security Policy (CSP) and Strict-Transport-Security (HSTS), which are required for application approval and protect against common web security considerations.
- [Cross-Origin Communication]: It explains the use of connect() and postMessage() for secure communication between different instances of a Zoom App, ensuring data is passed safely within the Zoom client environment.
Audit Metadata