seedance-video
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure credential management by reading the Volcengine Ark API key from environment variables or a local
.envfile (which is ignored by Git). It explicitly warns users against hardcoding or committing secrets. - [EXTERNAL_DOWNLOADS]: The skill downloads generated video files from the official service URLs provided by the Volcengine Ark API. These downloads are performed using Python's
urllib.requestand are triggered by the user's explicit request to save the output locally. - [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/seedance_video.py) to interface with the REST API. The script uses standard argument parsing and does not execute arbitrary shell commands or untrusted code. - [DATA_EXFILTRATION]: Network operations are restricted to the official Volcengine Ark API endpoints (
ark.cn-beijing.volces.com). There is no evidence of sensitive data being sent to unauthorized third-party domains.
Audit Metadata