seedance-video

No clear evidence of overt malware (no exec/eval, no persistence, no stealth exfiltration, no backdoor behavior). However, the module hardcodes a Feishu app secret (high credential exposure risk) and uses os.system on macOS (command execution sink) plus downloads server-provided video_url without allowlisting (operational/security risk). Overall, this should be reviewed and secrets should be removed/rotated; otherwise functionality appears consistent with a legitimate automation CLI.

This code is a Feishu (Lark) media upload + messaging integration. It reads a local file specified by the user and uploads it to Feishu over HTTPS, then sends a media message to a Feishu user. There is no clear malware/backdoor behavior in the logic (no dynamic execution or command execution). However, it hardcodes APP_SECRET in plaintext, creating a serious credential exposure risk. Overall, the main danger is intentional data exfiltration of the specified file to Feishu (by design) and severe secret leakage if this code is distributed.