text-to-speech
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for interacting with the HeyGen Text-to-Speech API in a standard, secure manner.
- [EXTERNAL_DOWNLOADS]: Fetches voice data and generates audio via HeyGen's official API and resource domains. These operations are essential to the skill's stated functionality.
- [CREDENTIALS_UNSAFE]: Appropriately handles authentication by instructing the user to use environment variables for the API key, avoiding hardcoded secrets.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text to generate audio. This surface is inherent to its primary purpose.
- Ingestion points:
textparameter in thetext_to_speechrequest payload in SKILL.md. - Boundary markers: None defined.
- Capability inventory: Network POST requests to HeyGen API.
- Sanitization: None.
Audit Metadata