Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese-language prompt-writing workflow for Seedance action videos, with no evidence of hidden access, persistence, exfiltration, or destructive behavior.
Install only if you want a Chinese-first Seedance combat prompt director. Provide only the videos, images, and brief details you want analyzed, and ask explicitly if you want output in another language or format.
Line L121 says the final output is a copyable Chinese text code block, which imposes a specific language as part of the workflow. The README does not indicate that users may opt into another language or choose locale preferences, so this is a natural-language policy concern.
The skill explicitly instructs the agent to read local reference files and, in some workflows, to inspect provided videos before proceeding, but it declares no tool scope or permissions boundary. That mismatch can lead to overbroad file-read capability exposure, making unintended access to unrelated local files or artifacts more likely if the runtime grants generic file access.
The markdown states that for complete new tasks the skill should output a directly copyable Chinese text code block by default. This imposes a specific language choice unless the user explicitly requests otherwise, which is a natural-language locale policy issue because it does not default to user choice or neutral language handling.
The entire template content is written in Chinese and includes a user-facing note in Chinese, which implies the skill expects Chinese-language use. The file does not offer any language or locale choice, nor does it document that this is a region-specific or language-specific tool, which can violate language/locale policy requirements.
