seedance-video

Fail

Audited by Snyk on Sep 8, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). The documentation and scripts contain Feishu application identifiers (cli_a9005be686f89bd3) and app secrets (UvUMxhBGbejzqbeuR5BQqeZnjCrnsCiC), as well as default user IDs. However, these are hardcoded credentials included directly within the skill's source scripts (seedance.py and send_video_feishu.py) for automated API integration with Feishu. According to the definitions and analysis protocol, these literal application secrets embedded in tool code are actual active credentials rather than placeholders or documentation templates.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Sep 8, 2026, 08:13 AM
Issues
1