Seedance2-Storyboard-Generator

Security checks across malware telemetry and agentic risk

Overview

This is a Markdown-only video storyboard prompt helper, with caution needed around rights and consent but no code or hidden system access.

Install only if you want a Seedance storyboard and prompt-writing helper. Do not use the copyright-refusal workaround, and only upload or generate face, voice, image, video, or audio material that you own, have licensed, or have clear permission to use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill includes a template for generating lip-synced talking-head videos from a person's image and an audio track, but it does not require consent checks, identity verification, or any warning about impersonation, privacy, or misuse. That omission meaningfully increases the risk of non-consensual deepfake generation, fraud, harassment, and reputational harm, especially because the instructions are directly actionable.

Ssd 2

Medium
Confidence
95% confidence
Finding
The instruction to replace character names with generic labels such as "Figure 1" and "Figure 2" specifically to avoid copyright-related refusals is an evasion technique. Even without executing code, this encourages bypassing downstream safety or compliance controls and normalizes policy circumvention in a content-generation workflow.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal