seedance-2-video-gen
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: seedance-2-video-gen Version: 2.1.0 The skill bundle provides a legitimate integration for Seedance 2.0 video generation via the EvoLink API. The installer (bin/cli.js) follows standard practices for detecting the OpenClaw environment and offers an interactive setup for the required API key, including optional persistence in shell configuration files. The core logic in scripts/seedance-gen.sh is well-implemented, using jq to securely construct JSON payloads and prevent shell injection vulnerabilities. The SKILL.md instructions are clearly aligned with the stated purpose, providing a structured flow for the AI agent to assist users without any evidence of malicious prompt injection or unauthorized data access.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the npm installer can execute local shell checks and copy files into the OpenClaw skills directory.
The installer uses shell execution to locate commands and detect the OpenClaw skills directory. In the visible code this is purpose-aligned installer plumbing, but users should know local commands are executed if they run the installer.
const { execSync, spawnSync } = require('child_process'); ... spawnSync(os.platform() === 'win32' ? 'where' : 'which', [cmd]Run the installer only from a trusted source, and prefer the standard OpenClaw installation route if you do not need the npm installer.
The skill may use your EvoLink account and credits when generating videos.
The skill requires an EvoLink API key to call the video generation service. This is expected for the stated integration, but it grants access to the user's EvoLink account/API quota.
requires":{"bins":["jq","curl"],"env":["EVOLINK_API_KEY"]},"primaryEnv":"EVOLINK_API_KEY"Use a dedicated or limited API key if available, store it securely, and monitor EvoLink usage or billing.
Prompts, images, video clips, or audio you provide for generation may be transmitted to EvoLink/Seedance for processing.
The skill is designed to send user prompts and selected media to the EvoLink API for generation. This external provider flow is disclosed and purpose-aligned, but it is still a data boundary users should understand.
Seedance 2.0 AI video generation via EvoLink API. Three modes — text-to-video, image-to-video (1-2 images), reference-to-video (images + videos + audio).
Avoid sending private or sensitive media unless you are comfortable with EvoLink's handling of that data, and review the provider's privacy and retention terms.