seedream-cli

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the seedream and seedance packages from the npm registry and the seedance-cli source code from GitHub. These are author-owned resources.
  • [COMMAND_EXECUTION]: Executes the seedream binary to perform image generation and configuration tasks.
  • [CREDENTIALS_UNSAFE]: Uses API keys and storage credentials (ARK_API_KEY, TOS_ACCESS_KEY, TOS_SECRET_KEY) for authentication. These are managed via standard environment variables or a local configuration file, following secure practices.
  • [DATA_EXFILTRATION]: Transmits local image data to the Volcengine Ark API. This is the intended functional behavior for generating and editing images.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 02:26 PM