generate-video-by-seedance

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/get_video_task_status.py

No clear malicious behavior or intentional malware is present. The code performs an expected API poll and video download, using the API key for the intended fixed service. Security concerns are present: an API-provided URL is downloaded without validation, and user-controlled filename/task_id values can enable arbitrary local path writes or overwrites. Restrict output paths, validate task IDs and filenames, require HTTPS and an approved download host, and consider download size and content checks.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 20, 2026, 10:29 AM
Package URL
pkg:socket/skills-sh/chunpu%2Fagent-skills%2Fgenerate-video-by-seedance%2F@46a104c3f17dd6e259c7ee35de7a9d70ebed1b6198c2ab4d72f8cf3f04d247a8