heygen-api
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill. The functionality matches the described purpose of providing an interface for the HeyGen API.
- [DATA_EXFILTRATION]: The skill uses environment variables to manage API keys, following security best practices to prevent credential exposure.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an ingestion surface via CSV file reading. However, the data is used for third-party API content generation and is not interpreted as instructions by the agent, presenting minimal risk.
Audit Metadata