text-to-speech
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts solely with official and well-known domains associated with the HeyGen service (api.heygen.com and heygen.ai).
- [SAFE]: Credential management follows best practices by instructing users to utilize environment variables (HEYGEN_API_KEY) rather than hardcoding sensitive keys.
- [SAFE]: Implementation examples use standard, trusted libraries such as
requestsfor Python and the nativefetchAPI for TypeScript, with no evidence of malicious dependencies or remote code execution. - [SAFE]: The skill metadata restricts tool access to the
mcp__heygen__*namespace, supporting the principle of least privilege in the execution environment.
Audit Metadata