create-video
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with official HeyGen API endpoints (api.heygen.com, upload.heygen.com, and files.heygen.ai). These are well-known domains associated with a legitimate technology service, and their use is consistent with the skill's stated purpose of video generation.
- [SAFE]: File system operations described in the reference files, such as reading files for upload or writing downloaded videos to disk, are standard components of the documented asset management workflow and do not involve access to sensitive system directories or credentials.
- [SAFE]: Authentication is managed through a user-defined environment variable (HEYGEN_API_KEY), adhering to secure credential management practices. No hardcoded secrets or sensitive keys were found in the codebase.
- [SAFE]: No patterns of obfuscation, malicious persistence, or privilege escalation were detected. The instructions provided to the agent are clear, transparent, and aligned with the functional requirements of the API.
Audit Metadata