Heygen
v1.0.2HeyGen integration. Manage Videos, Avatars, Templates. Use when the user wants to interact with HeyGen data.
⭐ 0· 139·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with HeyGen and its SKILL.md exclusively describes using the Membrane CLI to discover connectors, create connections, run pre-built actions, and proxy requests to HeyGen. Required items (network, Membrane account, Membrane CLI) match the stated purpose.
Instruction Scope
Instructions are narrowly scoped to using the Membrane CLI (login, connect, action run, request proxy). They do not ask the agent to read unrelated local files or environment variables. Note: the 'membrane request' proxy lets the agent send arbitrary paths/headers to HeyGen via Membrane, which is expected for this integration but means data sent will transit Membrane's service.
Install Mechanism
No install spec is embedded in the skill bundle (instruction-only), but the SKILL.md tells the user to run 'npm install -g @membranehq/cli'. Installing a public npm CLI globally is a common requirement but has typical risks (global filesystem write, trust in the npm package author). There are no opaque URL downloads or archive extractions.
Credentials
The skill does not request environment variables, system paths, or unrelated credentials. It relies on Membrane to manage auth server-side, which aligns with the guidance in the instructions.
Persistence & Privilege
Skill flags are default (not always-included). The skill does not request permanent/always privileges or modification of other skills. Autonomous invocation is allowed by default on the platform, which is expected and not by itself problematic.
Assessment
This skill appears internally consistent: it instructs the agent to use the Membrane CLI to connect to HeyGen and run actions. Before installing, verify you trust Membrane (@membranehq/cli on npm and the getmembrane.com service) because authentication and proxied HeyGen requests will go through Membrane's servers. Installing the CLI globally modifies your system (npm -g); if you prefer less privilege, consider a local install. Don’t paste unrelated secrets into command arguments, and review Membrane’s privacy/security docs or the npm package source (GitHub) if you need higher assurance. If you need the agent to avoid network calls or third-party proxies, do not install/use this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97dpqpax0tm3j4f0ctxxc1jg9843aw4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.