seedance-2-0-social-commerce-video

Warn

Audited by Socket on Aug 12, 2026

1 alert found:

Security
SecurityMEDIUM
resources/config.example.json

No malicious code behavior is demonstrated in this fragment because it contains only static configuration. However, it embeds a plaintext API key and an external service base URL, creating a significant credential-leak and unauthorized-access risk if used by surrounding code or if the secret is reused elsewhere. Additional context (how this config is loaded and how requests are made) is required to assess whether the external calls are legitimate and whether the key is scoped/rotated appropriately.

Confidence: 70%Severity: 70%
Audit Metadata
Analyzed At
Aug 12, 2026, 12:23 PM
Package URL
pkg:socket/skills-sh/wubin1836%2Fai-hive-agent-skills%2Fseedance-2-0-social-commerce-video%2F@3597199b30fcde16cb0c896284a7e97b7dc13c4c66e9a2bf09fd02d98c3b0fbf
Security Audit — socket — seedance-2-0-social-commerce-video