skills/vasanth19/skills/c-heygen/Socket

c-heygen

Warn

Audited by Socket on May 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core HeyGen rendering purpose is legitimate, and direct calls to api.heygen.com fit that purpose, but the polling design is not internally consistent: it routes status checks and a separate API key through an unrelated Railway-hosted service instead of HeyGen's official endpoints. That unnecessary third-party credential/data flow is the main risk.

Confidence: 89%Severity: 62%

Audit Metadata

Analyzed At

May 5, 2026, 07:42 PM

Package URL

pkg:socket/skills-sh/Vasanth19%2Fskills%2Fc-heygen%2F@3aa90f39ee2b9064a540924b43c78bc04f9f60c1