Back to skill

Security audit

Apidot Seedream 5 0 Lite Api

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only APIDot guide for Seedream 5.0 Lite workflows, with no executable code or automatic credential use.

This skill appears safe to install as documentation. If you use it for live APIDot calls, keep APIDOT_API_KEY in a backend secret store or server-side environment variable, avoid logging prompts or image URLs, and review APIDot's current docs and terms before sending data.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.