create-video

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: All network operations and API endpoints documented in the skill (api.heygen.com, upload.heygen.com, files.heygen.ai) are official vendor resources belonging to HeyGen.
  • [SAFE]: The skill correctly implements credential security by instructing users to provide the HEYGEN_API_KEY via environment variables rather than hardcoding sensitive tokens in scripts or configuration files.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of media assets from user-provided remote URLs to be processed for video generation. This is a documented functional requirement and includes validation checks, such as requiring HTTPS for source URLs.
  • [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized persistence were detected. The skill's behavior is consistent with its stated purpose as a video generation assistant.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 10:06 AM
Security Audit — agent-trust-hub — create-video