Skills product-launch-video

📦

product-launch-video

Name: product-launch-video
Author: heygen-com

Content revision r2 High Risk 📁 Filesystem access⚡ Contains scripts⚙️ External commands🌐 Network access🔑 Env variables

Create a Product Launch Video

Product launches need a clear story, consistent visuals, and an organized production process. This skill guides HyperFrames projects from source capture through review and final rendering.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "product-launch-video" from https://skillstore.io/skills/heygen-com-product-launch-video.md and its manifest at https://skillstore.io/api/skills/heygen-com-product-launch-video/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/heygen-com-product-launch-video.md Signed manifest GET /api/skills/heygen-com-product-launch-video/manifest Signed lockfile GET /api/skills/heygen-com-product-launch-video/lockfile

Test it

Using "product-launch-video". Create a launch video for a new team analytics feature.

Expected outcome:

A confirmed project brief and captured product assets.
A storyboard with narration, visual direction, and frame timing.
A reviewed MP4 path with a contact sheet for revisions.

Using "product-launch-video". Turn this product script into a short promotional video.

Expected outcome:

A verbatim or restructured narration plan based on the brief.
Branded frames, captions, transitions, and an assembled video project.

Security Audit

High Risk

v6 • 7/19/2026 Open versioned report

Most static matches are false positives caused by JavaScript regular-expression APIs, template literals, documentation-relative paths, and local media workflow operations. Two material risks remain: the workflow silently updates remote skill code and automatically uses available third-party vision credentials to process captured content without an explicit consent checkpoint. Static review was capped at 400/688 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Files scanned

4,880

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

High

SKILL.md:6

Unattended Remote Skill Update

The workflow instructs the agent to silently run an npx skill update before use. This fetches and installs current remote skill content without user confirmation, creating a supply-chain execution risk.

The instruction explicitly says to run the update silently and not ask. Package updates can change executable skill content before the workflow continues.

High

SKILL.md:57

Implicit External Vision Provider Use

The workflow conditionally uses existing Gemini, Google, or OpenRouter keys for automatic caption asset extraction without an explicit consent checkpoint. Captured product material may be processed by an external provider.

The instruction explicitly enables automatic processing when a listed API key exists. The stated behavior is not user-gated in the workflow.

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:57

Generic API/secret keys

If `GEMINI_API_KEY`, `GOOGLE_API_KEY`, or an OpenRouter key exists, capture auto-captions assets int

The workflow directs automatic caption extraction when third-party API keys are present, without an explicit consent step. This can cause captured product content to be sent to a configured external provider.

Risk Factors

📁 Filesystem access (50)

⚡ Contains scripts (15)

scripts/assemble-index.mjs:154 scripts/assemble-index.mjs:305 scripts/build-frame.mjs:78 scripts/build-frame.mjs:127 scripts/build-frame.mjs:137 scripts/lib/pad-frame-duration.mjs:27 scripts/lib/storyboard.mjs:107 scripts/lib/storyboard.mjs:115 scripts/lib/storyboard.mjs:146 scripts/lib/storyboard.mjs:165 scripts/lib/storyboard.mjs:208 scripts/lib/storyboard.mjs:214 scripts/lib/tokens.mjs:27 scripts/lib/tokens.mjs:35 scripts/transitions.mjs:77

⚙️ External commands (50)

🌐 Network access (4)

scripts/assemble-index.mjs:672 scripts/captions.mjs:458 scripts/media-contract.test.mjs:29 scripts/media-contract.test.mjs:70

🔑 Env variables (7)

scripts/audio.mjs:71 scripts/audio.mjs:127 scripts/audio.mjs:71 scripts/audio.mjs:127 scripts/audio.test.mjs:27 scripts/audio.test.mjs:73 SKILL.md:57

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/heygen-com-product-launch-video/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/heygen-com-product-launch-video/security.svg)](https://skillstore.io/skills/heygen-com-product-launch-video?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/heygen-com-product-launch-video?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/heygen-com-product-launch-video/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/heygen-com-product-launch-video.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

heygen-com. (2026). product-launch-video security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/heygen-com-product-launch-video/audits/6

BibTeX citation

@techreport{heygen-com-heygen-com-product-launch-video-2026,
  author = {heygen-com},
  title = {product-launch-video security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/heygen-com-product-launch-video/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "product-launch-video security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "heygen-com"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/heygen-com-product-launch-video/audits/6"
identifiers:
  - type: other
    value: "skillstore:heygen-com-product-launch-video:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Launch a SaaS feature

Turn a feature brief and product URL into a paced promotional video.

Create a product demo

Use captured screens and a narration script to build a structured product showcase.

Prepare a campaign video

Create a branded launch asset with captions, music, and final review gates.

Try These Prompts

Start from a URL

Create a 30-second product launch video from https://example.com. Use a clear, confident tone.

Use a launch brief

Create a product launch video for our analytics dashboard. Emphasize faster reporting, use a modern visual style, and include captions.

Build from a script

Use this approved script to create a 45-second launch video. Keep the narration verbatim and use our captured product screens as the primary visuals.

Produce a reviewed deliverable

Create a 60-second vertical launch video for our mobile app. Draft the storyboard first, wait for my approval, then render a high-quality MP4.

Best Practices

Provide a confirmed product brief with audience, format, duration, and desired tone.
Review the storyboard and sketches before authorizing final rendering.
Use official brand assets and verify that captured text and claims are accurate.

Avoid

Do not render before reviewing the storyboard and visual preview.
Do not assume voice or music providers are available without checking sign-in status.
Do not use unverified marketing claims in narration or on-screen text.