build-zoom-phone-integration
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides integration guidance and code examples that follow security best practices.
- Documentation in
references/environment-variables.mdandRUNBOOK.mdemphasizes keeping OAuth secrets and webhook tokens server-side in environment variables, preventing exposure in client-side code. - The JavaScript example for the Smart Embed bridge (
examples/smart-embed-postmessage-bridge.md) includes explicit origin validation (event.origin === 'https://applications.zoom.us') to prevent unauthorized cross-origin message processing. - [EXTERNAL_DOWNLOADS]: The skill references official Zoom developer documentation and the official Zoom CRM sample repository on GitHub for architectural guidance. These are trusted resources used for documentation and reference purposes.
Audit Metadata