seedance
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install additional functional skills from the
belt-shandinference-shrepositories and fetches a CLI installation guide from GitHub. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to executebeltCLI commands for account authentication, model searching, and triggering video generation processes. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user inputs, including text prompts and URLs for images, videos, and audio, which are then passed into the video generation pipeline.
- Ingestion points: Text prompts and media asset URLs provided in the
--inputJSON parameter of thebelt app runcommand. - Boundary markers: Command arguments are structured as JSON strings within the CLI call.
- Capability inventory: The skill has the capability to execute shell commands via the
Bashtool to interact with the externalinference.shAPI. - Sanitization: The skill does not perform local sanitization, relying instead on the safety filters and validation logic of the
inference.shplatform.
Audit Metadata