heygen-video
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a command to install the HeyGen CLI by piping a script from the official vendor domain (static.heygen.ai) to bash. This is a verified vendor resource and represents the standard installation procedure for the service.
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute CLI commands for video processing and to run a local update-check script that verifies the current version of the skill.
- [EXTERNAL_DOWNLOADS]: A shell script (scripts/update-check.sh) fetches version metadata from the vendor's official GitHub repository (github.com/heygen-com/skills) to ensure the skill is up to date. This operation is limited to version verification and does not transmit sensitive data.
Audit Metadata