中文 EN

扫描报告

扫描新文件

✓ 可信 — 风险评分 0/100
上次扫描：2 天前 重新扫描
0 /100
seedance-2-video-gen
Seedance 2.0 AI video generation via EvoLink API — text-to-video, image-to-video, and reference-to-video modes with auto audio.
A legitimate AI video generation skill that calls the EvoLink API using standard CLI tools, with no malicious behavior, hidden functionality, or credential exfiltration detected.
技能名称seedance-2-video-gen
分析耗时29.1s
引擎pi
✓
可以安装
Approve for use. The skill is well-documented and performs only its declared function of video generation via the EvoLink API.
资源类型声明权限推断权限状态证据
命令执行 WRITE WRITE ✓ 一致 SKILL.md:metadata.requires.bins=[jq,curl]; scripts/seedance-gen.sh executes curl…
文件系统 READ READ ✓ 一致 SKILL.md, references/api-params.md are read-only documentation
文件系统 WRITE WRITE ✓ 一致 bin/cli.js writes to skills dir and shell rc files — installer function, clearly…
网络访问 READ READ ✓ 一致 scripts/seedance-gen.sh:12 hardcodes https://api.evolink.ai; SKILL.md:37 declare…
15 项发现
🔗
中危 外部 URL 外部 URL
https://evolink.ai/signup?utm_source=github&utm_medium=readme&utm_campaign=seedance2-video-gen-skill-for-openclaw
README.de.md:11
🔗
中危 外部 URL 外部 URL
https://evolink.ai?utm_source=github&utm_medium=readme&utm_campaign=seedance2-video-gen
README.de.md:31
🔗
中危 外部 URL 外部 URL
https://evolink.ai/dashboard?utm_source=github&utm_medium=readme&utm_campaign=seedance2-video-gen
README.de.md:172
🔗
中危 外部 URL 外部 URL
https://clawhub.ai/kn74p4xy6sja0199cea53anecs81kqjs/seedance-2-video-gen
README.de.md:190
🔗
中危 外部 URL 外部 URL
https://evolink.ai
SKILL.md:38
🔗
中危 外部 URL 外部 URL
https://evolink.ai/dashboard
SKILL.md:132
🔗
中危 外部 URL 外部 URL
https://evolink.ai/dashboard.
SKILL.md:136
🔗
中危 外部 URL 外部 URL
https://evolink.ai/dashboard?utm_source=github&utm_medium=readme&utm_campaign=seedance2-video-gen-skill-for-openclaw
SKILL.md:144
🔗
中危 外部 URL 外部 URL
https://evolink.ai/signup
bin/cli.js:58
🔗
中危 外部 URL 外部 URL
https://curl.se/windows/
bin/cli.js:262
🔗
中危 外部 URL 外部 URL
https://stedolan.github.io/jq/
bin/cli.js:271
🔗
中危 外部 URL 外部 URL
https://api.evolink.ai/v1/videos/generations
references/api-params.md:9
🔗
中危 外部 URL 外部 URL
https://api.evolink.ai/v1/tasks/
references/api-params.md:16
🔗
中危 外部 URL 外部 URL
https://cdn.example.com/video.mp4
references/api-params.md:290
🔗
中危 外部 URL 外部 URL
https://api.evolink.ai
scripts/seedance-gen.sh:7

目录结构

15 文件 · 122.5 KB · 3404 行
Markdown 11f · 2381L Shell 1f · 531L JavaScript 1f · 460L JSON 2f · 32L
├─ ▾ 📁 bin
│ └─ 📜 cli.js JavaScript 460L · 18.2 KB
├─ ▾ 📁 references
│ └─ 📝 api-params.md Markdown 391L · 12.7 KB
├─ ▾ 📁 scripts
│ └─ 🔧 seedance-gen.sh Shell 531L · 18.6 KB
├─ 📋 _meta.json JSON 5L · 144 B
├─ 📋 package.json JSON 27L · 689 B
├─ 📝 README.de.md Markdown 202L · 6.9 KB
├─ 📝 README.es.md Markdown 202L · 6.8 KB
├─ 📝 README.fr.md Markdown 202L · 7.1 KB
├─ 📝 README.ja.md Markdown 202L · 7.5 KB
├─ 📝 README.ko.md Markdown 202L · 7.0 KB
├─ 📝 README.md Markdown 205L · 6.6 KB
├─ 📝 README.tr.md Markdown 202L · 6.7 KB
├─ 📝 README.zh-CN.md Markdown 203L · 6.1 KB
├─ 📝 README.zh-TW.md Markdown 202L · 6.1 KB
└─ 📝 SKILL.md Markdown 168L · 11.3 KB

安全亮点

✓ API key (EVOLINK_API_KEY) is used only to authenticate with the declared EvoLink API — no exfiltration
✓ Payload built safely with jq -n (shell injection protection) — scripts/seedance-gen.sh:177
✓ Network requests restricted to a single hardcoded domain: api.evolink.ai (no dynamic IPs, no data exfil)
✓ No credential harvesting — skill only reads EVOLINK_API_KEY from environment
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env) — only writes to openclaw skills directory
✓ No base64 decoding, eval(), or obfuscated code
✓ No curl|bash or wget|sh remote script execution
✓ Script dependencies (jq, curl) are standard CLI tools, declared and appropriate for the task
✓ CLI installer is standard npm package with no runtime dependencies beyond Node.js stdlib
✓ Complete doc-to-code alignment — all capabilities are declared in SKILL.md metadata and usage docs