seedance-video

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements secure credential management by reading the Volcengine Ark API key from environment variables or a local .env file (which is ignored by Git). It explicitly warns users against hardcoding or committing secrets.
  • [EXTERNAL_DOWNLOADS]: The skill downloads generated video files from the official service URLs provided by the Volcengine Ark API. These downloads are performed using Python's urllib.request and are triggered by the user's explicit request to save the output locally.
  • [COMMAND_EXECUTION]: The skill uses a Python script (scripts/seedance_video.py) to interface with the REST API. The script uses standard argument parsing and does not execute arbitrary shell commands or untrusted code.
  • [DATA_EXFILTRATION]: Network operations are restricted to the official Volcengine Ark API endpoints (ark.cn-beijing.volces.com). There is no evidence of sensitive data being sent to unauthorized third-party domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 02:46 PM