seedance-2-0
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill documents a workflow where user-provided strings are interpolated into complex prompt templates and passed to video generation tools, creating a surface for indirect prompt injection.
- Ingestion points: The
promptparameter used in thevideo_selector.executeandseedance_video.executecode examples inSKILL.md. - Boundary markers: The skill lacks specific delimiters or instructions to ignore malicious commands embedded within the user-provided prompt content.
- Capability inventory: The skill is configured with
Bash,Read, andWritetools and makes network calls to external AI providers (fal.ai, Replicate, Runway, etc.). - Sanitization: There is no evidence of input validation or escaping for the
promptdata before it is sent to the model endpoints.
Audit Metadata