muapi-seedance-2

Warn

Audited by Snyk on Mar 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's i2v mode explicitly accepts arbitrary external image URLs (see scripts/generate-seedance.sh handling of --image/--image-url and the IMAGES_JSON sent to the seedance-v2.0-i2v endpoint), so untrusted, user-provided third-party content is fetched/ingested and directly influences generation behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 13, 2026, 09:56 PM
Issues
1