text-to-speech

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and code examples for interacting with the HeyGen Text-to-Speech API in a standard, secure manner.
  • [EXTERNAL_DOWNLOADS]: Fetches voice data and generates audio via HeyGen's official API and resource domains. These operations are essential to the skill's stated functionality.
  • [CREDENTIALS_UNSAFE]: Appropriately handles authentication by instructing the user to use environment variables for the API key, avoiding hardcoded secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text to generate audio. This surface is inherent to its primary purpose.
  • Ingestion points: text parameter in the text_to_speech request payload in SKILL.md.
  • Boundary markers: None defined.
  • Capability inventory: Network POST requests to HeyGen API.
  • Sanitization: None.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 06:31 PM