higgsfield-operator
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access attempts were detected. The skill's content is consistent with its stated purpose as a platform guide.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
higgsfield-clientPython package via pip. This is the official SDK associated with the service described in the documentation and is used for programmatic video generation. - [CREDENTIALS_UNSAFE]: The skill demonstrates best practices for credential management by instructing users to use environment variables (
HF_KEY,HF_API_KEY) and providing placeholders (e.g., 'your-api-key') rather than hardcoding sensitive information. - [COMMAND_EXECUTION]: Provides standard shell commands for package installation and environment variable configuration, which are routine for developer-oriented documentation.
- [REMOTE_CODE_EXECUTION]: While the skill provides Python and JavaScript code snippets that make network requests to
cloud.higgsfield.ai, these are documented API interactions for the platform's service and do not constitute arbitrary or malicious code execution.
Audit Metadata