Scan Report
0 /100
seedance-2-video-gen
Seedance 2.0 AI video generation via EvoLink API — text-to-video, image-to-video, and reference-to-video modes with auto audio.
A legitimate AI video generation skill that calls the EvoLink API using standard CLI tools, with no malicious behavior, hidden functionality, or credential exfiltration detected.
Safe to install
Approve for use. The skill is well-documented and performs only its declared function of video generation via the EvoLink API.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md:metadata.requires.bins=[jq,curl]; scripts/seedance-gen.sh executes curl… |
| Filesystem | READ | READ | ✓ Aligned | SKILL.md, references/api-params.md are read-only documentation |
| Filesystem | WRITE | WRITE | ✓ Aligned | bin/cli.js writes to skills dir and shell rc files — installer function, clearly… |
| Network | READ | READ | ✓ Aligned | scripts/seedance-gen.sh:12 hardcodes https://api.evolink.ai; SKILL.md:37 declare… |
15 findings
Medium External URL 外部 URL
https://evolink.ai/signup?utm_source=github&utm_medium=readme&utm_campaign=seedance2-video-gen-skill-for-openclaw README.de.md:11 Medium External URL 外部 URL
https://evolink.ai?utm_source=github&utm_medium=readme&utm_campaign=seedance2-video-gen README.de.md:31 Medium External URL 外部 URL
https://evolink.ai/dashboard?utm_source=github&utm_medium=readme&utm_campaign=seedance2-video-gen README.de.md:172 Medium External URL 外部 URL
https://clawhub.ai/kn74p4xy6sja0199cea53anecs81kqjs/seedance-2-video-gen README.de.md:190 Medium External URL 外部 URL
https://evolink.ai SKILL.md:38 Medium External URL 外部 URL
https://evolink.ai/dashboard SKILL.md:132 Medium External URL 外部 URL
https://evolink.ai/dashboard. SKILL.md:136 Medium External URL 外部 URL
https://evolink.ai/dashboard?utm_source=github&utm_medium=readme&utm_campaign=seedance2-video-gen-skill-for-openclaw SKILL.md:144 Medium External URL 外部 URL
https://evolink.ai/signup bin/cli.js:58 Medium External URL 外部 URL
https://curl.se/windows/ bin/cli.js:262 Medium External URL 外部 URL
https://stedolan.github.io/jq/ bin/cli.js:271 Medium External URL 外部 URL
https://api.evolink.ai/v1/videos/generations references/api-params.md:9 Medium External URL 外部 URL
https://api.evolink.ai/v1/tasks/ references/api-params.md:16 Medium External URL 外部 URL
https://cdn.example.com/video.mp4 references/api-params.md:290 Medium External URL 外部 URL
https://api.evolink.ai scripts/seedance-gen.sh:7 File Tree
15 files · 122.5 KB · 3404 lines Markdown 11f · 2381L
Shell 1f · 531L
JavaScript 1f · 460L
JSON 2f · 32L
├─
▾
bin
│ └─
cli.js
JavaScript
├─
▾
references
│ └─
api-params.md
Markdown
├─
▾
scripts
│ └─
seedance-gen.sh
Shell
├─
_meta.json
JSON
├─
package.json
JSON
├─
README.de.md
Markdown
├─
README.es.md
Markdown
├─
README.fr.md
Markdown
├─
README.ja.md
Markdown
├─
README.ko.md
Markdown
├─
README.md
Markdown
├─
README.tr.md
Markdown
├─
README.zh-CN.md
Markdown
├─
README.zh-TW.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ API key (EVOLINK_API_KEY) is used only to authenticate with the declared EvoLink API — no exfiltration
✓ Payload built safely with jq -n (shell injection protection) — scripts/seedance-gen.sh:177
✓ Network requests restricted to a single hardcoded domain: api.evolink.ai (no dynamic IPs, no data exfil)
✓ No credential harvesting — skill only reads EVOLINK_API_KEY from environment
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env) — only writes to openclaw skills directory
✓ No base64 decoding, eval(), or obfuscated code
✓ No curl|bash or wget|sh remote script execution
✓ Script dependencies (jq, curl) are standard CLI tools, declared and appropriate for the task
✓ CLI installer is standard npm package with no runtime dependencies beyond Node.js stdlib
✓ Complete doc-to-code alignment — all capabilities are declared in SKILL.md metadata and usage docs