OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit May 18, 2026
Independent checks from skills.sh's audit partners.
The skill provides functionality to create and manage HeyGen avatars for agents, users, and characters. It includes instructions to install the official HeyGen CLI using a vendor-provided script and manages local identity files. The primary security consideration is a low-risk indirect prompt injection surface due to the processing of workspace identity files without explicit boundary markers.
Detected behaviors
No alerts
1 issue