seedance

SUSPICIOUS: the core behavior is coherent for a video-generation skill, but it routes credentials and user content through Pixazo as a gateway instead of an official BytePlus API, stores the key in a local file, and includes a wildcard transitive skill install instruction. No confirmed malware or dangerous installer is present, but the intermediary data flow and trust expansion raise medium risk.