Borrowing it
Nothing to install: this file belongs to heygen-com/heygen-cli. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/heygen-com/heygen-cli/main/.agents/skills/e2e-cli-test/SKILL.mdgit clone --depth 1 https://github.com/heygen-com/heygen-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/heygen-com/heygen-cli/e2e-cli-test)<a href="https://agentmods.dev/skills/heygen-com/heygen-cli/e2e-cli-test"><img src="https://agentmods.dev/badge/skills/heygen-com/heygen-cli/e2e-cli-test/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/heygen-com/heygen-cli/e2e-cli-test"><img src="https://agentmods.dev/badge/skills/heygen-com/heygen-cli/e2e-cli-test.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00071 | $0.02596 |
| Opus 5.5 | $0.00028 | $0.01038 |
| Sonnet 5.5 | $0.00014 | $0.00519 |
| Haiku 4.5 | $0.00007 | $0.00260 |
Grade A, and why
e2e-cli-test scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 22d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 237 lines — stays where its author put it; the contents beside it link to each section on GitHub.
E2E CLI Test
Step 5 of the release; the release-cli skill runs it for you. It also works on its own.
Pre-release validation that exercises ./bin/heygen against the live HeyGen API.
Prerequisites
HEYGEN_API_KEYmust be set in the environment- Working directory must be the heygen-cli repo root
Workflow
Run each phase in order. Report results as you go. If a phase fails, continue
to the next phase (do not abort early) so the final report covers everything.
Always use ./bin/heygen (the freshly built binary), never a globally installed heygen.
Step 1: Build
make build
If this fails, stop and report the build error. Nothing else can run.
Step 2: Phase 1 -- Auth and account
./bin/heygen auth status
./bin/heygen user me get
- Assert
auth statusexits 0 - Assert
user me getexits 0, stdout is valid JSON, andjq -e '.data.username'succeeds - If either command fails, stop and report the auth error. Every subsequent phase requires a valid key.
Step 3: Phase 2 -- Read-only list commands
Run each command below. Assert exit 0 and valid JSON stdout for every one. Save the JSON output from each -- Phase 3 will extract IDs from these results.
./bin/heygen video list --limit 1
./bin/heygen template list --limit 1
./bin/heygen ai-clipping list --limit 1
./bin/heygen avatar list --limit 1
./bin/heygen avatar looks list --limit 1
./bin/heygen avatar look-templates list --limit 1
./bin/heygen voice list --limit 1
./bin/heygen model audio voices list --limit 1
./bin/heygen audio sounds list --query "calm ambient piano" --limit 1
./bin/heygen video-translate list --limit 1
./bin/heygen video-translate languages list
./bin/heygen video-translate proofreads list --limit 1
./bin/heygen video-agent list --limit 1
./bin/heygen video-agent styles list --limit 1
./bin/heygen lipsync list --limit 1
./bin/heygen webhook endpoints list
./bin/heygen webhook event-types list
./bin/heygen webhook events list
./bin/heygen brand kits list --limit 1
./bin/heygen brand glossaries list --limit 1
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 22d ago Changed · +2 lines b4014c9950d0
- 1mo ago Changed · +18 lines da1dd41c1eb0
- 2mo ago First seen · 217 lines · 71 tokens per session scan A ec8445d187bf
e2e-cli-test is a skill published in the GitHub repository heygen-com/heygen-cli (164 stars, last pushed today), licensed Apache-2.0. It adds 71 tokens to every session and 2,596 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
browser-qa
Testing web apps through a real browser: reconnaissance before acting, selector discovery, state capture, console errors and screenshot evidence. Use on a web surface end to end, or to reproduce a front-end bug.
agent-browser
Use the host-side agent-browser CLI for local browser smoke tests, screenshots, snapshots, and simple UI validation against forwarded localhost URLs.
e2e-run
Run the Playwright end-to-end test suite.
playwright
Skill "playwright" from ashish7802/awesome-api-skills, covering playwright skill, ecosystem graph, quick start, production patterns and auto-waiting and locators.
hatch3r-browser-verify
Opt-in browser verification skill — spec-run-first Playwright verification (assertions execute in the runner, agent reads only failures), axe-core a11y audits, toHaveScreenshot() regression diffs, E2E test scaffolds, and snapshot-mode exploratory driving. Default ON for UI-affecting agent invocations; disable globally…
hatch3r-qa-path
Produces a human-run manual QA test path from a PR, branch diff, or uncommitted working tree — a risk-ordered table of steps, expected results, and automated-coverage references plus a shippability sign-off. Rows are auto-proven via delegated verification sub-agents before emission, so the human walks only what…