seedance-video-prompt

Fail

Audited by Snyk on Aug 27, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (critical risk: 1.00). The skill includes explicit instructions to create deceptive promotional content — including "fake news" style reports and fabricated expert endorsements — and gives methods to make AI-generated people appear indistinguishable from real humans to trick viewers.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). Source SKILL.md 路由/生成流程在“用户上传了参考素材(如有)”后会对用户提供的本地图片或远程 URL 图片进行“逐张查看并分析内容/广告词语提取”,从而让外部作者的自由文本(例如用户在图片上/作为附件描述中的提示注入)进入运行时可读上下文;且“远程 URL 图片用图像分析工具查看”属于运行时会读到的用户提交内容链路。

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 27, 2026, 05:35 AM
Issues
2
Security Audit — snyk — seedance-video-prompt