seedance-20

SUSPICIOUS: the skill’s stated purpose matches audio-reference generation, and there is no visible credential harvesting or third-party routing. However, it requires executing an unseen local PowerShell script with `ExecutionPolicy Bypass`, making the executable behavior unverifiable from the skill alone and raising material supply-chain/execution trust risk.