The Agent Skills Directory

[SAFE]: The skill facilitates interaction with HeyGen, a well-known AI video generation service. All network communication is directed to the official api.heygen.com and resource.heygen.ai domains.
[CREDENTIALS_UNSAFE]: The skill correctly identifies the need for an API key (HEYGEN_API_KEY) and demonstrates secure handling by retrieving it from environment variables rather than hardcoding credentials.
[INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data via image and video URLs provided to the API. However, the interaction is structured (JSON payloads to a specific API), and the response is handled as data rather than being directly interpolated into instructions, which mitigates injection risks.
[COMMAND_EXECUTION]: The skill provides curl command examples and Python/TypeScript snippets. These are standard API interaction templates for developers and do not involve the execution of arbitrary or unsafe shell commands.

faceswap