Skip to main content

yt-to-blog

Transforms YouTube videos into a comprehensive content suite, including blog posts, social media threads, and video clips.

Install this skill

or
63/100

Security score

The yt-to-blog skill was audited on Feb 9, 2026 and we found 21 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 74

Curl to non-GitHub URL

SourceSKILL.md
74curl -s -H "X-Api-Key: API_KEY_HERE" https://api.heygen.com/v2/avatars | python3 -c "import sys,json; d=json.load(sys.stdin); print('✅ API key works!' if 'data' in d else '❌ Invalid key')"
medium line 92

Curl to non-GitHub URL

SourceSKILL.md
92curl -s -H "X-Api-Key: API_KEY" https://api.heygen.com/v2/avatars | python3 -c "
medium line 111

Curl to non-GitHub URL

SourceSKILL.md
111curl -s -H "X-Api-Key: API_KEY" https://api.heygen.com/v2/voices | python3 -c "
medium line 359

Curl to non-GitHub URL

SourceSKILL.md
359curl -s -X POST "https://api.heygen.com/v2/video/generate" \
low line 68

External URL reference

SourceSKILL.md
681. Tell the user: "Go to https://app.heygen.com/settings — grab your API key from the API section."
low line 69

External URL reference

SourceSKILL.md
692. If they don't have a HeyGen account: "Sign up at https://heygen.com — the free tier gives you a few credits to test with."
low line 74

External URL reference

SourceSKILL.md
74curl -s -H "X-Api-Key: API_KEY_HERE" https://api.heygen.com/v2/avatars | python3 -c "import sys,json; d=json.load(sys.stdin); print('✅ API key works!' if 'data' in d else '❌ Invalid key')"
low line 85

External URL reference

SourceSKILL.md
85> Go to https://app.heygen.com/avatars → Create Instant Avatar → follow their recording guide. Stand in good lighting, look at camera, speak naturally for 2+ minutes.
low line 92

External URL reference

SourceSKILL.md
92curl -s -H "X-Api-Key: API_KEY" https://api.heygen.com/v2/avatars | python3 -c "
low line 104

External URL reference

SourceSKILL.md
104> "Go to https://app.heygen.com/voice-clone → Clone your voice. Upload a clean audio sample (1-2 min of you speaking naturally). HeyGen will create a voice ID.
low line 111

External URL reference

SourceSKILL.md
111curl -s -H "X-Api-Key: API_KEY" https://api.heygen.com/v2/voices | python3 -c "
low line 126

External URL reference

SourceSKILL.md
1262. Navigate to `https://substack.com/sign-in`
low line 180

External URL reference

SourceSKILL.md
180"Turn this into a full content suite: https://youtu.be/XXXXX"
low line 254

External URL reference

SourceSKILL.md
2543. Navigate to `https://PUBLICATION.substack.com/publish/post`
low line 264

External URL reference

SourceSKILL.md
264- Verify draft at `https://PUBLICATION.substack.com/publish`
low line 359

External URL reference

SourceSKILL.md
359curl -s -X POST "https://api.heygen.com/v2/video/generate" \
low line 395

External URL reference

SourceSKILL.md
395"https://api.heygen.com/v1/video_status.get?video_id=$VIDEO_ID" \
low line 506

External URL reference

SourceSKILL.md
506"source": "https://youtu.be/XXXXX",
low line 509

External URL reference

SourceSKILL.md
509"substackUrl": "https://...",
low line 510

External URL reference

SourceSKILL.md
510"tweetUrl": "https://...",
low line 551

External URL reference

SourceSKILL.md
551- **HeyGen quota errors?** Check credits at https://app.heygen.com/settings — upgrade plan or reduce clip count.
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →