Skills media-use
๐Ÿ“ฆ

media-use

Content revision r2 Critical ๐Ÿ“ Filesystem access๐Ÿ”‘ Env variablesโš™๏ธ External commands๐ŸŒ Network accessโšก Contains scripts

Create and manage project media assets

Media work often requires separate tools for audio, images, captions, and asset tracking. This skill provides a unified workflow that resolves or generates assets and records them locally.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "media-use" from https://skillstore.io/skills/heygen-com-media-use.md and its manifest at https://skillstore.io/api/skills/heygen-com-media-use/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "media-use". Resolve music for an upbeat product launch video.

Expected outcome:

  • A matching background music asset is selected.
  • A local project path and asset identifier are returned.
  • The asset is registered for later reuse.

Using "media-use". Create a voiceover and captions from this script.

Expected outcome:

  • The workflow identifies the available voice provider.
  • A voiceover path and caption output are produced when the provider succeeds.
  • The result lists any missing setup requirements.

Security Audit

Critical
v6 โ€ข 7/19/2026 Open versioned report

One critical finding is confirmed: the installation guidance pipes a remotely fetched script into bash without integrity verification. The remaining static matches are predominantly media-tool operations, documented configuration, relative links, or test fixtures; no prompt injection or credential-exfiltration intent was found. Static review was capped at 400/2029 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

120
Files scanned
17,211
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

Critical
Pipe to shell pattern
curl -fsSL https://static.heygen.ai/cli/install.sh | bash
The setup instructions pipe a remote installation script directly into bash without pinning or verification. A compromised or substituted endpoint would execute arbitrary code.

Risk Factors

๐Ÿ“ Filesystem access (50)
audio/references/bgm.md:8 audio/references/bgm.md:5 audio/references/bgm.md:5 audio/references/captions/authoring.md:3 audio/references/captions/authoring.md:16 audio/references/captions/transcript-handling.md:3 audio/references/captions/transcript-handling.md:60 audio/references/captions/transcript-handling.md:96 audio/references/captions/transcript-handling.md:54 audio/references/requirements.md:9 audio/references/requirements.md:19 audio/references/requirements.md:21 audio/references/requirements.md:25 audio/references/requirements.md:9 audio/references/requirements.md:19 audio/references/requirements.md:21 audio/references/requirements.md:25 audio/references/tts.md:7 audio/references/tts.md:13 audio/references/tts.md:31 audio/references/tts.md:13 audio/references/tts.md:31 audio/scripts/audio.mjs:42 audio/scripts/audio.mjs:104 audio/scripts/audio.mjs:118 audio/scripts/audio.mjs:282 audio/scripts/audio.mjs:10 audio/scripts/audio.test.mjs:45 audio/scripts/audio.test.mjs:3 audio/scripts/audio.test.mjs:18 audio/scripts/audio.test.mjs:36 audio/scripts/heygen-tts.mjs:18 audio/scripts/heygen-tts.mjs:89 audio/scripts/heygen-tts.mjs:112 audio/scripts/heygen-tts.mjs:16 audio/scripts/heygen-tts.mjs:16 audio/scripts/lib/bgm.mjs:77 audio/scripts/lib/bgm.mjs:80 audio/scripts/lib/bgm.mjs:83 audio/scripts/lib/bgm.mjs:92 audio/scripts/lib/bgm.mjs:94 audio/scripts/lib/bgm.mjs:96 audio/scripts/lib/bgm.mjs:98 audio/scripts/lib/bgm.mjs:100 audio/scripts/lib/bgm.mjs:102 audio/scripts/lib/bgm.mjs:104 audio/scripts/lib/heygen.mjs:7 audio/scripts/lib/heygen.mjs:25 audio/scripts/lib/heygen.mjs:55 audio/scripts/lib/heygen.mjs:132
๐Ÿ”‘ Env variables (50)
audio/references/bgm.md:5 audio/references/bgm.md:40 audio/references/captions/transcript-handling.md:71 audio/references/captions/transcript-handling.md:84 audio/references/requirements.md:9 audio/references/requirements.md:10 audio/references/requirements.md:11 audio/references/requirements.md:21 audio/references/requirements.md:24 audio/references/tts.md:13 audio/references/tts.md:14 audio/references/tts.md:30 audio/references/tts.md:41 audio/scripts/audio.mjs:79 audio/scripts/audio.mjs:79 audio/scripts/heygen-tts.mjs:16 audio/scripts/lib/bgm.mjs:21 audio/scripts/lib/bgm.mjs:21 audio/scripts/lib/bgm.mjs:33 audio/scripts/lib/bgm.mjs:7 audio/scripts/lib/bgm.mjs:21 audio/scripts/lib/heygen.mjs:38 audio/scripts/lib/heygen.mjs:50 audio/scripts/lib/heygen.mjs:53 audio/scripts/lib/heygen.mjs:38 audio/scripts/lib/heygen.mjs:50 audio/scripts/lib/heygen.mjs:53 audio/scripts/lib/heygen.mjs:3 audio/scripts/lib/heygen.mjs:4 audio/scripts/lib/heygen.mjs:50 audio/scripts/lib/heygen.mjs:71 audio/scripts/lib/heygen.mjs:73 audio/scripts/lib/heygen.mjs:77 audio/scripts/lib/heygen.mjs:85 audio/scripts/lib/heygen.mjs:105 audio/scripts/lib/heygen.test.mjs:9 audio/scripts/lib/heygen.test.mjs:10 audio/scripts/lib/heygen.test.mjs:11 audio/scripts/lib/heygen.test.mjs:13 audio/scripts/lib/heygen.test.mjs:14 audio/scripts/lib/heygen.test.mjs:15 audio/scripts/lib/heygen.test.mjs:18 audio/scripts/lib/heygen.test.mjs:19 audio/scripts/lib/heygen.test.mjs:20 audio/scripts/lib/heygen.test.mjs:21 audio/scripts/lib/heygen.test.mjs:22 audio/scripts/lib/heygen.test.mjs:23 audio/scripts/lib/heygen.test.mjs:29 audio/scripts/lib/heygen.test.mjs:44 audio/scripts/lib/heygen.test.mjs:67
โš™๏ธ External commands (50)
๐ŸŒ Network access (50)
audio/references/captions/transcript-handling.md:70 audio/references/captions/transcript-handling.md:83 audio/scripts/lib/heygen.mjs:116 audio/scripts/lib/heygen.mjs:128 audio/scripts/lib/heygen.mjs:11 audio/scripts/lib/tts.test.mjs:117 audio/scripts/lib/tts.test.mjs:141 luts/index.json:9 luts/index.json:27 luts/index.json:44 references/operations.md:266 scripts/lib/freeze.mjs:10 scripts/lib/freeze.test.mjs:34 scripts/lib/freeze.test.mjs:6 scripts/lib/freeze.test.mjs:7 scripts/lib/freeze.test.mjs:8 scripts/lib/freeze.test.mjs:12 scripts/lib/freeze.test.mjs:13 scripts/lib/freeze.test.mjs:14 scripts/lib/freeze.test.mjs:15 scripts/lib/freeze.test.mjs:19 scripts/lib/freeze.test.mjs:26 scripts/lib/freeze.test.mjs:27 scripts/lib/freeze.test.mjs:28 scripts/lib/freeze.test.mjs:29 scripts/lib/freeze.test.mjs:30 scripts/lib/freeze.test.mjs:31 scripts/lib/freeze.test.mjs:32 scripts/lib/freeze.test.mjs:33 scripts/lib/freeze.test.mjs:34 scripts/lib/freeze.test.mjs:35 scripts/lib/freeze.test.mjs:36 scripts/lib/freeze.test.mjs:37 scripts/lib/freeze.test.mjs:38 scripts/lib/freeze.test.mjs:39 scripts/lib/freeze.test.mjs:44 scripts/lib/freeze.test.mjs:45 scripts/lib/freeze.test.mjs:27 scripts/lib/freeze.test.mjs:28 scripts/lib/freeze.test.mjs:29 scripts/lib/freeze.test.mjs:30 scripts/lib/freeze.test.mjs:31 scripts/lib/freeze.test.mjs:32 scripts/lib/freeze.test.mjs:33 scripts/lib/freeze.test.mjs:34 scripts/lib/freeze.test.mjs:44 scripts/lib/freeze.test.mjs:20 scripts/lib/heygen-cli.mjs:13 scripts/lib/heygen-video-provider.test.mjs:36 scripts/lib/heygen-video-provider.test.mjs:49
โšก Contains scripts (20)

Detected Patterns

Pipe to shell pattern
Audited by: claude View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/heygen-com-media-use/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/heygen-com-media-use/security.svg)](https://skillstore.io/skills/heygen-com-media-use?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/heygen-com-media-use?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/heygen-com-media-use/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/heygen-com-media-use.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

heygen-com. (2026). media-use security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/heygen-com-media-use/audits/6

BibTeX citation

@techreport{heygen-com-heygen-com-media-use-2026, author = {heygen-com}, title = {media-use security audit report (audit version 6)}, institution = {Skillstore}, year = {2026}, number = {6}, url = {https://skillstore.io/skills/heygen-com-media-use/audits/6}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "media-use security audit report (audit version 6)" version: "unspecified" type: report authors: - name: "heygen-com" date-released: "2026-07-19" url: "https://skillstore.io/skills/heygen-com-media-use/audits/6" identifiers: - type: other value: "skillstore:heygen-com-media-use:audit:6" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
64
Architecture
85
Maintainability
87
Content
67
Community
91
Spec Compliance

What You Can Build

Prepare a video soundtrack

Resolve music and sound effects, then use the audio workflow for voiceover and loudness preparation.

Build a branded presentation

Find logos, icons, images, and color grades and keep their local asset records organized.

Automate media handoff

Generate or resolve project media and return stable local paths for a production workflow.

Try These Prompts

Find background music
Resolve background music for a 30-second product launch video. Use an upbeat and modern style.
Add sound effects
Review this project for scene transitions that need sound effects. Propose one consolidated list and wait for approval.
Create a voiceover workflow
Create a voiceover from this script, generate captions, and return the local asset paths and required provider setup.
Prepare reusable media assets
Resolve a logo, icons, background music, and a color grade for this project. Register each approved asset for reuse.

Best Practices

  • Verify downloaded installers with a published checksum or signature before running them.
  • Keep provider credentials in approved environment variables or credential stores, not in project files.
  • Review suggested media changes before applying them to preserve editorial control.

Avoid

  • Do not run remote shell installers without reviewing and verifying the downloaded content.
  • Do not assume generation works without checking provider credentials, quotas, and local dependencies.
  • Do not silently apply media recommendations to a project without user approval.

Frequently Asked Questions

What media can this skill manage?
It can manage music, sound effects, images, icons, logos, voices, captions, color grades, and LUTs.
Does it require an online account?
Some provider features require credentials. Local alternatives may be available for selected tasks.
Can it generate voiceovers?
Yes. It supports text-to-speech workflows when a supported provider or local tool is configured.
Where are assets stored?
Resolved assets are stored in local project media directories and can be recorded for reuse.
Does it modify media automatically?
It should propose media improvements and wait for approval before applying changes.
How should I install the required CLI?
Prefer a version-pinned download with a published checksum or signature. Verify it before execution.

Developer Details

Author

heygen-com

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

77d0e66fbadeb1f5d1e6a5aada7861240b8ed2d7

Maintenance freshness

7/19/2026

Usage

2 downloads ยท 0 views

File structure

๐Ÿ“„ .gitignore

๐Ÿ“ audio/

๐Ÿ“ assets/

๐Ÿ“ sfx/

๐Ÿ“„ chime.mp3

๐Ÿ“„ click-soft.mp3

๐Ÿ“„ click.mp3

๐Ÿ“„ CREDITS.md

๐Ÿ“„ error.mp3

๐Ÿ“„ glitch-1.mp3

๐Ÿ“„ glitch-2.mp3

๐Ÿ“„ glitch-3.mp3

๐Ÿ“„ impact-bass-1.mp3

๐Ÿ“„ impact-bass-2.mp3

๐Ÿ“„ key-press.mp3

๐Ÿ“„ manifest.json

๐Ÿ“„ notification.mp3

๐Ÿ“„ ping.mp3

๐Ÿ“„ pop.mp3

๐Ÿ“„ riser.mp3

๐Ÿ“„ sparkle.mp3

๐Ÿ“„ typing.mp3

๐Ÿ“„ whoosh-cinematic.mp3

๐Ÿ“„ whoosh-short.mp3

๐Ÿ“„ whoosh.mp3

๐Ÿ“ references/

๐Ÿ“„ bgm.md

๐Ÿ“ captions/

๐Ÿ“„ authoring.md

๐Ÿ“„ motion.md

๐Ÿ“„ transcript-handling.md

๐Ÿ“„ remove-background.md

๐Ÿ“„ requirements.md

๐Ÿ“„ sfx.md

๐Ÿ“„ transcribe.md

๐Ÿ“„ tts-to-captions.md

๐Ÿ“„ tts.md

๐Ÿ“ scripts/

๐Ÿ“„ audio.mjs

๐Ÿ“„ audio.test.mjs

๐Ÿ“„ heygen-tts.mjs

๐Ÿ“ lib/

๐Ÿ“„ bgm.mjs

๐Ÿ“„ bgm.test.mjs

๐Ÿ“„ concurrency.mjs

๐Ÿ“„ concurrency.test.mjs

๐Ÿ“„ heygen.mjs

๐Ÿ“„ heygen.test.mjs

๐Ÿ“„ python.mjs

๐Ÿ“„ python.test.mjs

๐Ÿ“„ sfx.mjs

๐Ÿ“„ sfx.test.mjs

๐Ÿ“„ tts.mjs

๐Ÿ“„ tts.spawn.test.mjs

๐Ÿ“„ tts.test.mjs

๐Ÿ“„ lyria-recipe.py

๐Ÿ“„ wait-bgm.mjs

๐Ÿ“ luts/

๐Ÿ“„ index.json

๐Ÿ“„ README.md

๐Ÿ“ references/

๐Ÿ“„ operations.md

๐Ÿ“„ telemetry-dashboard.md

๐Ÿ“ scripts/

๐Ÿ“„ audio-duck.mjs

๐Ÿ“„ eval.mjs

๐Ÿ“ lib/

๐Ÿ“„ adopt.mjs

๐Ÿ“„ adopt.test.mjs

๐Ÿ“„ bgm-provider.mjs

๐Ÿ“„ brand-provider.mjs

๐Ÿ“„ bundled-sfx-provider.mjs

๐Ÿ“„ bundled-sfx-provider.test.mjs

๐Ÿ“„ cache.mjs

๐Ÿ“„ candidates.mjs

๐Ÿ“„ candidates.test.mjs

๐Ÿ“„ codex-provider.mjs

๐Ÿ“„ coverage.test.mjs

๐Ÿ“„ cube-build.mjs

๐Ÿ“„ cube-build.test.mjs

๐Ÿ“„ cube-validate.mjs

๐Ÿ“„ cube-validate.test.mjs

๐Ÿ“„ cutlist.mjs

๐Ÿ“„ cutlist.test.mjs

๐Ÿ“„ duck.mjs

๐Ÿ“„ duck.test.mjs

๐Ÿ“„ freeze.mjs

๐Ÿ“„ freeze.test.mjs

๐Ÿ“„ grade-analyzer.mjs

๐Ÿ“„ grade-analyzer.test.mjs

๐Ÿ“„ heygen-cli.mjs

๐Ÿ“„ heygen-cli.test.mjs

๐Ÿ“„ heygen-search.mjs

๐Ÿ“„ heygen-search.test.mjs

๐Ÿ“„ heygen-video-provider.mjs

๐Ÿ“„ heygen-video-provider.test.mjs

๐Ÿ“„ image-provider.mjs

๐Ÿ“„ index-gen.mjs

๐Ÿ“„ local-models.mjs

๐Ÿ“„ local-models.test.mjs

๐Ÿ“„ local-run.mjs

๐Ÿ“„ local-run.test.mjs

๐Ÿ“„ logo-provider.mjs

๐Ÿ“„ logo-provider.test.mjs

๐Ÿ“„ ltx-video-provider.mjs

๐Ÿ“„ ltx-video-provider.test.mjs

๐Ÿ“„ lut-preset-provider.mjs

๐Ÿ“„ lut-preset-provider.test.mjs

๐Ÿ“„ manifest.mjs

๐Ÿ“„ manifest.test.mjs

๐Ÿ“„ match.mjs

๐Ÿ“„ mflux-provider.mjs

๐Ÿ“„ misses.mjs

๐Ÿ“„ misses.test.mjs

๐Ÿ“„ npx-sync.mjs

๐Ÿ“„ npx-sync.test.mjs

๐Ÿ“„ parakeet-words.mjs

๐Ÿ“„ parakeet-words.test.mjs

๐Ÿ“„ prefs-store.mjs

๐Ÿ“„ prefs-store.test.mjs

๐Ÿ“„ probe.mjs

๐Ÿ“„ probe.test.mjs

๐Ÿ“„ providers.mjs

๐Ÿ“„ recipe-store.mjs

๐Ÿ“„ recipe-store.test.mjs

๐Ÿ“„ registry.mjs

๐Ÿ“„ registry.test.mjs

๐Ÿ“„ search.mjs

๐Ÿ“„ search.test.mjs

๐Ÿ“„ sfx-provider.mjs

๐Ÿ“„ specs.mjs

๐Ÿ“„ specs.test.mjs

๐Ÿ“„ stats.mjs

๐Ÿ“„ stats.test.mjs

๐Ÿ“„ telemetry.mjs

๐Ÿ“„ telemetry.test.mjs

๐Ÿ“„ tts-local-provider.mjs

๐Ÿ“„ tts-local-provider.test.mjs

๐Ÿ“„ usage.mjs

๐Ÿ“„ usage.test.mjs

๐Ÿ“„ voice-provider.mjs

๐Ÿ“„ voice-provider.test.mjs

๐Ÿ“„ words.mjs

๐Ÿ“„ prefs.mjs

๐Ÿ“„ recipe.mjs

๐Ÿ“„ resolve.mjs

๐Ÿ“„ resolve.test.mjs

๐Ÿ“„ transcribe.mjs

๐Ÿ“„ transcript-cut.mjs

๐Ÿ“„ SKILL.md

More from heygen-com

View all
View all