seedance-video-creator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires a local deployment of the 'jimeng-free-api-all' Docker image, which is an open-source project by the same author (wwwzhouhui). It also fetches generated image and video content from 'byteimg.com' and 'jimeng.com' domains, which are official components of the integrated workflow.- [COMMAND_EXECUTION]: A shell script 'generate_video.sh' is provided to automate API requests using 'curl'. While the script handles user input for prompt fields, it operates within the standard scope of a media generation tool and does not attempt hidden or unauthorized command injection.- [DATA_EXFILTRATION]: The skill documents the process for users to manually retrieve their 'sessionid' from the official 'jimeng.jianying.com' domain to authenticate API requests. While this involves sensitive session data, it is a transparent requirement for the tool's core functionality and is sent only to the specified API endpoints.
Audit Metadata