ClawHub

Video Agent (Deprecated)

v2.23.0

[DEPRECATED — uses outdated v1/v2 endpoints] Use `create-video` for prompt-based video generation (v3 Video Agent) or `avatar-video` for precise avatar/scene...

⭐ 7· 5.1k·21 current·21 all-time
byMichael Wang@michaelwang11394
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (HeyGen video generation) aligns with requirements and referenced actions. The only required credential is HEYGEN_API_KEY, which is exactly what an API-based video service needs. The included reference files/documentation explain avatar, asset, and video workflows that are relevant to the stated purpose.
✓
Instruction Scope
SKILL.md and reference files instruct the agent to call HeyGen APIs (or use mcp__heygen__* tools) and to upload local asset files when requested. The README includes sample code that reads local files to upload assets — this is expected for an asset-upload/video-generation skill and does not reference unrelated system files or credentials.
✓
Install Mechanism
Instruction-only skill with no install spec or downloads. No code executed or written to disk by an installer, so install risk is minimal.
✓
Credentials
Only HEYGEN_API_KEY is declared as required and used throughout the instructions. That single API key is proportionate for calling HeyGen endpoints. Documentation also advises not to expose keys client-side and to rotate/monitor keys.
✓
Persistence & Privilege
Skill does not request permanent 'always' inclusion and does not attempt to modify other skills or system-wide agent settings. Autonomous invocation is allowed (platform default) but not excessive here.
Scan Findings in Context
[no_findings] expected: The regex-based scanner found no code patterns to flag; this is expected because the package is instruction-only (documentation and examples) rather than executable code.
Assessment
This skill is a deprecated HeyGen documentation wrapper and appears coherent with its purpose. Before installing: prefer the newer create-video or avatar-video skills (SKILL.md warns v1/v2 endpoints are deprecated), keep your HEYGEN_API_KEY secret and use it from a backend (not client-side), and limit the key's permissions if possible. Be aware uploads (photo avatars/backgrounds) will send image/audio files to HeyGen — don't upload sensitive personal data or others' images without consent. Monitor usage and rotate the API key if you see unexpected activity. If you need long-term support or updated endpoints, use the v3-focused HeyGen skills instead.

Like a lobster shell, security has layers — review code before you run it.

ai-avatarvk9790dd422aqk8f1b782d86agd82d8stai-videovk9790dd422aqk8f1b782d86agd82d8stavatarvk9790dd422aqk8f1b782d86agd82d8stdeprecatedvk97dqahj5435msyd4skykt458584r74wdigital-humanvk9790dd422aqk8f1b782d86agd82d8stheygenvk97dqahj5435msyd4skykt458584r74wlatestvk97dqahj5435msyd4skykt458584r74wtalking-headvk9790dd422aqk8f1b782d86agd82d8sttext-to-videovk9790dd422aqk8f1b782d86agd82d8stvideovk97dqahj5435msyd4skykt458584r74wvideo-generationvk9790dd422aqk8f1b782d86agd82d8st

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvHEYGEN_API_KEY
Primary envHEYGEN_API_KEY

Comments