seedance-video-prompt
Fail
Audited by Snyk on Aug 27, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (critical risk: 1.00). The skill includes explicit instructions to create deceptive promotional content — including "fake news" style reports and fabricated expert endorsements — and gives methods to make AI-generated people appear indistinguishable from real humans to trick viewers.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Source
SKILL.md路由/生成流程在“用户上传了参考素材(如有)”后会对用户提供的本地图片或远程 URL 图片进行“逐张查看并分析内容/广告词语提取”,从而让外部作者的自由文本(例如用户在图片上/作为附件描述中的提示注入)进入运行时可读上下文;且“远程 URL 图片用图像分析工具查看”属于运行时会读到的用户提交内容链路。
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata