seedance-animator
Warn
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill contains logic in
SKILL.mdandagents/seedance-runner.mddirected at evading the safety filters of the Seedance 2.0 model. It provides a specific mapping of restricted keywords to permissive alternatives (e.g., 'fanservice' to 'slapstick comedy', 'ecchi' to 'anime style') to ensure content moderation systems do not block the generation requests. - [COMMAND_EXECUTION]: The script
scripts/orchestrator.pyutilizessubprocess.runto execute other Python scripts within the skill's directory (such asnano_banana.pyandseedance.py). While the command construction uses a list format to mitigate shell injection, the skill relies on executing local code driven by user-provided inputs like prompts and project descriptions. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to download generated image and video files from remote URLs returned by the Replicate API using the
requestslibrary, as implemented inscripts/replicate_client.pyandscripts/seedance.py.
Audit Metadata