seedance-short-drama-video

SUSPICIOUS. The stated purpose and requested capabilities are mostly coherent for a video-generation skill, and the visible install path is modest. Risk comes from unclear provider provenance and hidden network behavior in the bundled script: the skill forwards prompts, media, and an API key to remote endpoints that are not independently verified here as official AI Hive infrastructure.

No malicious code behavior is demonstrated in this fragment because it contains only static configuration. However, it embeds a plaintext API key and an external service base URL, creating a significant credential-leak and unauthorized-access risk if used by surrounding code or if the secret is reused elsewhere. Additional context (how this config is loaded and how requests are made) is required to assess whether the external calls are legitimate and whether the key is scoped/rotated appropriately.