Back to skill

Security audit

Apidot Seedream 4 5 Api

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only APIDot Seedream 4.5 integration guide with disclosed API-key guidance and no executable behavior.

This skill is reasonable to install if you want APIDot Seedream 4.5 API guidance. Keep APIDOT_API_KEY server-side, avoid exposing private prompts or image URLs in logs or frontend code, and verify current pricing, limits, and request fields in the live APIDot docs before making real API calls.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.