heygen
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates interaction with the official HeyGen API, a well-known service for AI video generation. All network communication is directed to the official api.heygen.com domain.
- [COMMAND_EXECUTION]: Employs curl commands via bash -c to interface with the API. This implementation is designed to handle environment variables correctly within the agent's execution environment and does not involve downloading or executing untrusted scripts.
- [CREDENTIALS_UNSAFE]: Correctly utilizes an environment variable (HEYGEN_TOKEN) for API authentication, avoiding hardcoded secrets. The vm0_secrets metadata is used for secure secret management by the platform.
Audit Metadata