seedance-2-video-gen
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The installation script (
bin/cli.js) includes functionality to modify shell initialization files, such as.bashrc,.zshrc, orconfig.fish, to store theEVOLINK_API_KEYenvironment variable across sessions. The script implements a user confirmation step before making these modifications. - [COMMAND_EXECUTION]: The skill's installation and operational logic involve the execution of shell commands. The installer (
bin/cli.js) useschild_process.execSyncandspawnSyncfor environment detection andfs.chmodSyncto set executable permissions on scripts. The primary functionality involves the agent executing thescripts/seedance-gen.shbash script. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill ingests user-provided text prompts and external URLs for images, videos, and audio files via command-line arguments in
SKILL.mdandscripts/seedance-gen.sh. - Boundary markers: The skill does not employ specific delimiters or "ignore instructions" warnings to isolate user-provided data from system instructions.
- Capability inventory: The skill can execute local shell scripts and perform network requests via
curlto theapi.evolink.aiendpoint. - Sanitization: The generation script utilizes
jqwith argument binding (--argand--argjson) to safely construct JSON payloads, which prevents basic JSON injection but does not mitigate malicious content within the prompt or media metadata from influencing the underlying AI model.
Audit Metadata