ClawHub
Back to skill

Security audit

Seedance 3x3 Optimizer

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Chinese-language story-to-video-script formatter with no sensitive access, persistence, or hidden execution behavior.

Installers should understand that this skill is tailored for Chinese Seedance prompt/script workflows and may activate on some general requests to make text into a video-generation script. It does not appear to access files, credentials, network services, or persistent system settings.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger phrases are broad enough to match generic requests for rewriting stories or converting text into a video-generation script, which can cause unintended invocation of this skill outside its narrow Seedance-specific use case. Over-broad activation increases the chance that user input is transformed in ways the user did not intend, and can interfere with other skills or baseline behavior.

Natural-Language Policy Violations

Low
Confidence
86% confidence
Finding
The manifest description is written in Chinese and implicitly assumes Chinese-language interaction, but the file does not state that the skill is region-specific or provide user opt-in for language selection. This can create a language policy issue if the broader environment expects skills not to force a locale without explicit choice.

Static analysis

No suspicious patterns detected.