ClawHub
Back to skill

Security audit

Ark Seedance Video

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Volcengine Ark Seedance video-generation helper that uses an Ark API key, sends selected prompts/media to Ark, and stores outputs locally.

Install only if you intend to use Volcengine Ark from this workspace. Do not use sensitive prompts, private URLs, or local media unless you are comfortable sending them to Ark, and review task IDs carefully before using delete.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
84% confidence
Finding
The default prompt instructs the agent to invoke the skill broadly for any video-generation need without clear preconditions, approval gates, or scope limits. In a skill that can generate media, poll tasks, download assets, and handle local media, this can cause over-invocation, unintended external API use, and unnecessary processing of sensitive user content.

Missing User Warnings

Low
Confidence
89% confidence
Finding
The file explicitly instructs users to write Ark request bodies to a JSON file in the workspace and to keep request.json, task.json, and downloaded assets together for reproducibility, but it does not warn that prompts, task metadata, and generated media will persist locally. In a skill that may handle user-provided media or sensitive prompts, this can lead to unintended retention and later disclosure through logs, shared workspaces, backups, or artifact collection.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The examples include externally hosted image/audio URLs and instruct users to run a bundled script that submits payloads and downloads assets, but they omit any notice that prompts, URLs, and referenced media may be transmitted to third-party services over the network. In this skill context, that increases the chance a user unknowingly sends private media, internal URLs, or sensitive prompt content to external systems.

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
scripts/seedance-video.js:215