skills/pixazo-ai/skills/heygen/Socket

heygen

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's video-generation purpose is plausible, but it is materially misaligned with HeyGen's official integration path because it proxies all requests and credentials through Pixazo. The main risk is intermediary credential/data routing plus local key persistence and optional transitive skill installation, not confirmed malware.

Confidence: 90%Severity: 64%

Audit Metadata

Analyzed At

Sep 22, 2026, 09:03 PM

Package URL

pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fheygen%2F@1716328e4a5929ce37e64bee0ed805a3a58229d5e1635b5d8efe3dcef7edca0d