Security checks across malware telemetry and agentic risk
This video-generation skill mostly does what it says, but it includes an unnecessary automatic file-opening step that can invoke the shell on macOS with a user-controlled download path.
Review before installing. Use only prompts and images you are comfortable sending to Volcengine/ByteDance, use a scoped Ark API key where possible, choose a non-sensitive output directory, and avoid unusual download paths on macOS until the auto-open os.system behavior is removed or replaced with a non-shell implementation. VirusTotal was still pending, so this verdict is based on artifact review and scanner context rather than antivirus confirmation.
# Open on macOS
if sys.platform == "darwin":
os.system(f'open "{filepath}"')
except Exception as e:
print(f"Download failed: {e}", file=sys.stderr)## Execution (Recommended: Python CLI Tool) A Python CLI tool is provided at `~/.claude/skills/seedance-2-0-video/seedance.py` for robust execution with proper error handling, automatic retries, and local image base64 conversion. **Prefer using this tool over raw curl commands.** ### Quick Examples with Python CLI
**With image URL:**
```bash
TASK_RESULT=$(curl -s -X POST "https://ark.cn-beijing.volces.com/api/v3/contents/generations/tasks" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $ARK_API_KEY" \
-d '{IMG_BASE64=$(base64 < "$IMG_PATH" | tr -d '\n')
IMG_DATA_URL="data:image/${IMG_EXT_LOWER};base64,${IMG_BASE64}"
TASK_RESULT=$(curl -s -X POST "https://ark.cn-beijing.volces.com/api/v3/contents/generations/tasks" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $ARK_API_KEY" \
-d '{Requires two images.
```bash
TASK_RESULT=$(curl -s -X POST "https://ark.cn-beijing.volces.com/api/v3/contents/generations/tasks" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $ARK_API_KEY" \
-d '{```bash
# Step 1: Create draft
DRAFT_RESULT=$(curl -s -X POST "https://ark.cn-beijing.volces.com/api/v3/contents/generations/tasks" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $ARK_API_KEY" \
-d '{DRAFT_TASK_ID=$(echo "$DRAFT_RESULT" | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")
# Step 2: After draft succeeds, generate final video from draft
FINAL_RESULT=$(curl -s -X POST "https://ark.cn-beijing.volces.com/api/v3/contents/generations/tasks" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $ARK_API_KEY" \
-d '{### Quick Examples with Python CLI ```bash # Text-to-video (create + wait + download) python3 ~/.claude/skills/seedance-2-0-video/seedance.py create \ --prompt "超写实特写：一只橘白色相间的英国短毛小猫，趴在米白色亚麻沙发上，慵懒地对着镜头打了一个大大的哈欠，露出粉色的小舌头和尖尖的乳牙。窗外是柔和的午后自然光，从侧面洒在小猫的绒毛上，毛发根根分明。背景虚化为暖色调的室内环境，有模糊的绿色盆栽。镜头固定，焦点始终在小猫脸上，画面温馨治愈。" \ --wait --download ~\\.openclaw\\workspace\\files
```bash # 第 1 段 python3 ~/.claude/skills/seedance-2-0-video/seedance.py create \ --prompt "开场白，展示品牌Logo" \ --duration 5 --return-last-frame true --wait --download "~\\.openclaw\\workspace\\files\\video"
63/63 vendors flagged this skill as clean.