heygen-translate
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads an installation script for the HeyGen CLI from the official vendor domain at
https://static.heygen.ai/cli/install.sh. - [REMOTE_CODE_EXECUTION]: Provides instructions for the agent to install necessary tools by piping a remote shell script directly to
bash. - [COMMAND_EXECUTION]: Utilizes the
Bashtool to run theheygenCLI for authentication, asset uploads, and video processing tasks. - [INDIRECT_PROMPT_INJECTION]: Ingests and processes SRT (subtitle) files generated by the HeyGen API from user-supplied videos. While this content is external, the skill handles it as part of a structured translation workflow. Ingestion points:
resource2.heygen.aifor SRT files inreferences/proofreads-workflow.md. Boundary markers: None. Capability inventory:Bash,WebFetch,Read,Write. Sanitization: None.
Audit Metadata