seedance-2-video-gen
Warn
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The installation utility
bin/cli.jsmodifies system shell profile files (such as.bashrc,.zshrc, andconfig.fish) to persist theEVOLINK_API_KEYenvironment variable, which acts as a persistence mechanism. - [COMMAND_EXECUTION]: The skill executes a local bash script
scripts/seedance-gen.shthat utilizes system commands and network utilities to communicate with the video generation API. - [EXTERNAL_DOWNLOADS]: The skill's documentation encourages installation via
npx, which fetches and executes code from the npm registry, a remote code repository.
Audit Metadata