seedance-2-video-gen

Warn

Audited by Gen Agent Trust Hub on Apr 24, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The installation utility bin/cli.js modifies system shell profile files (such as .bashrc, .zshrc, and config.fish) to persist the EVOLINK_API_KEY environment variable, which acts as a persistence mechanism.
  • [COMMAND_EXECUTION]: The skill executes a local bash script scripts/seedance-gen.sh that utilizes system commands and network utilities to communicate with the video generation API.
  • [EXTERNAL_DOWNLOADS]: The skill's documentation encourages installation via npx, which fetches and executes code from the npm registry, a remote code repository.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 24, 2026, 02:55 PM