seedance

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and it uses official Ark-style endpoints by default, but it relies on a non-official third-party CLI and forwards `ARK_API_KEY` plus user media through that code. The optional custom endpoint setting further weakens data-flow integrity by allowing credential/media routing to arbitrary servers. This is not confirmed malware, but it is higher-risk than a first-party or direct official API integration.