seedance-video-reference-to-video

SUSPICIOUS. The skill’s core behavior matches a video-generation workflow and its install footprint is modest, but provenance is not fully coherent: the description references AI Hive while public evidence points to Atlas Cloud, and the stated API-key format does not match the provider docs. This is more consistent with a real but poorly attributed third-party integration than outright malware, yet the branding and credential inconsistencies make trust and data-flow integrity uncertain.

No malicious code behavior is demonstrated in this fragment because it contains only static configuration. However, it embeds a plaintext API key and an external service base URL, creating a significant credential-leak and unauthorized-access risk if used by surrounding code or if the secret is reused elsewhere. Additional context (how this config is loaded and how requests are made) is required to assess whether the external calls are legitimate and whether the key is scoped/rotated appropriately.