text-to-speech
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official HeyGen API endpoints (
api.heygen.com) for its operations. - [SAFE]: Sensitive information is handled securely by instructing users to store the API key in an environment variable (
HEYGEN_API_KEY) rather than hardcoding it. - [SAFE]: The tool restricts its environment using
allowed-tools: mcp__heygen__*, following the principle of least privilege. - [SAFE]: Code examples in TypeScript and Python are standard implementations of HTTP requests and do not contain malicious patterns or dangerous command executions.
Audit Metadata