seedance-anime-drama
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on shell command execution to perform its primary tasks. It calls local scripts (
ofox-image.shandofox-video.sh) usingbashand utilizes system binaries likecurlandjqfor network interactions and JSON processing. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests untrusted text from users (novel or script excerpts) and transforms that content into prompts for generative AI models.
- Ingestion points: User-provided story or script excerpts described in
SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or specific "ignore embedded instructions" warnings for the processed data.
- Capability inventory: The skill has access to shell execution (
bash), network communication (curl), and local file system writes (--out-dir). - Sanitization: There is no evidence of automated sanitization or filtering of the user-provided text before it is used to generate prompts for the image and video tools.
Audit Metadata