avatar-video
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety guidelines were detected. The instructions are focused exclusively on facilitating legitimate interactions with the HeyGen API.
- [DATA_EXFILTRATION]: Network operations are directed to the vendor's official domains (api.heygen.com, upload.heygen.com) and are used solely for API communication and asset management. Credential handling via environment variables aligns with security best practices.
- [COMMAND_EXECUTION]: Shell command examples and provided scripts in Python and TypeScript are standard implementation guides for API integration. No suspicious system modifications, privilege escalation, or persistence attempts were found.
- [EXTERNAL_DOWNLOADS]: External references and asset downloads are limited to the vendor's own infrastructure and are necessary for the primary functions of video generation and previewing.
- [SAFE]: The skill represents a professional implementation of a video production tool using the HeyGen API. All analyzed files contain legitimate documentation and code samples consistent with the stated purpose.
Audit Metadata