Back to skill
Skillv1.0.1
ClawScan security
Seedance 2.0 Prompt Writing · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 18, 2026, 1:06 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only prompt-writing guide for Seedance 2.0 whose requirements and instructions align with its stated purpose and do not request extra credentials or perform installs.
- Guidance
- This skill is an offline prompt-writing guide and appears internally consistent. Before installing or using it: (1) if you copy the SKILL.md into your agent's skills directory, you are only adding text instructions — nothing in this bundle runs code by itself; (2) the README includes an optional 'npx skills add dexhunter/seedance2-skill' command that would fetch a package from npm — do not run it unless you trust that package and owner; (3) the prompts assume you will upload media to Seedance (or provide references). Be mindful of privacy when uploading images/videos (avoid real identifiable faces as the guide warns), and verify any external links or packages referenced in README independently before executing them.
Review Dimensions
- Purpose & Capability
- okThe name/description (Seedance 2.0 prompt writing) match the SKILL.md content: detailed guidance on the @ reference system, input limits, camera language, templates, and interaction flow. Nothing requested (no env vars, no binaries, no config paths) is out of scope for a prompt-writing guide.
- Instruction Scope
- okSKILL.md contains only prompt-writing instructions, examples, and constraints. It asks the user to supply images/videos/audio as model inputs (expected) and does not instruct the agent to read unrelated system files, environment variables, or transmit data to hidden endpoints.
- Install Mechanism
- noteThe registry lists no install spec (instruction-only), which is low risk. README suggests two installation options: manual copy into ~/.claude/skills (harmless if done intentionally) and an 'npx skills add dexhunter/seedance2-skill' command. The latter would fetch code from the npm ecosystem outside the registry; this is not part of the published skill bundle and should be treated as an external action a user must vet before running.
- Credentials
- okThe skill declares no required environment variables, no primary credential, and no config paths. The SKILL.md does not reference hidden credentials or other secrets — requested assets are user media files, which is consistent with the tool's purpose.
- Persistence & Privilege
- okSkill is instruction-only, always:false, user-invocable:true, and does not request permanent agent presence or modify other skill/system configs. It does not request elevated privileges.