zoom-meeting-sdk-web
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- External Resource Loading: The skill references several external JavaScript libraries (React, Redux, Lodash) and the Zoom SDK itself from
source.zoom.us. These are legitimate resources hosted on the official Zoom CDN, which is standard practice for web-based SDK integrations. - Remote Code Acquisition: Documentation includes instructions to clone the official Zoom authentication endpoint sample from GitHub. This is a recommended security pattern for generating meeting signatures on a backend server to prevent exposing the SDK Secret on the client side.
- Credential Handling: The skill demonstrates how to manage meeting signatures, passwords, and ZAK tokens. It explicitly warns developers to never expose their SDK Secret in frontend code, which aligns with industry security standards for authentication.
- Command Line Instructions: Standard development commands such as
npm installandgit cloneare provided for project setup. These commands target official packages and repositories maintained by the vendor. - Technical Requirements: The skill explains the implementation of Cross-Origin Isolation (COOP/COEP) headers required for SharedArrayBuffer, which is a modern browser security feature used here to enable high-performance video capabilities.
Audit Metadata