seedance-storyboard
Warn
Audited by Snyk on Feb 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly accepts and ingests arbitrary user-provided network media (image_files / video_files / audio_files URLs) and uploads via --image-url (see SKILL.md Step 6 "处理素材 URL" / "用户提供的网络图片：直接使用" and scripts/seedance_api.py cmd_upload), so untrusted third-party content is read and used as reference material that can influence prompt construction and task submission.
Audit Metadata