Versioned security assessment

Report ID: SA-DEBCA91B

6/30/2026, 11:35:41 AM

seedance-v2 security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
seedance-v2
Version
v2
Maintainer
runcomfy-com
Source
github.com/runcomfy-com/skills/tree/main/seedance-v2/
Coverage
1 Files scanned · 182 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Low

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis reported many high-risk patterns, but review found most are Markdown examples, placeholder URLs, or text matches rather than executable code. No evidence found of malicious intent or prompt injection in SKILL.md. The skill still needs a marketplace warning because it instructs users to run a local CLI that sends prompts and reference media URLs to RunComfy and writes outputs or tokens locally.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 182 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 7 evidence locations

Filesystem access

May read or write local files.

Observed in 5 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 6 evidence locations

Capability review items (3)
Medium
SKILL.md:70-73SKILL.md:92-99SKILL.md:173
External CLI Invocation Sends User Data to RunComfy
The skill instructs users to run the RunComfy CLI with prompt input and reference media. This is expected behavior for the skill, but it sends user content to an external service and depends on a local executable.
The documented commands and API description clearly show user prompt data being submitted through RunComfy. This appears intentional and legitimate, but it is still an external data transfer risk.
Medium
SKILL.md:82SKILL.md:95-97SKILL.md:179
Reference Media URLs Are Processed Outside the User Machine
The skill supports image, video, and audio URLs as model inputs and states that external URLs are fetched by the RunComfy model server. Users may expose private media URLs if they provide sensitive references.
The schema examples and privacy note explicitly describe remote processing of reference URLs. The behavior is appropriate for a hosted video model but requires user awareness.
Medium
SKILL.md:73SKILL.md:177SKILL.md:181
Local Token and Output File Handling
The skill documents token storage under a user configuration path and writes generated assets to a selected output directory. This is normal CLI behavior, but shared machines and broad output paths increase exposure risk.
The file paths and token storage behavior are documented directly in the skill. The stated mode 0600 reduces risk, so this is a moderate operational concern rather than evidence of abuse.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Low
SKILL.md:42SKILL.md:112
System Reconnaissance Alerts Are Routing and Media-Spec Text
The reconnaissance alerts point to model routing guidance and reference media constraints. They do not collect host information, enumerate files, or inspect the runtime environment.
The cited lines are natural-language instructions for choosing the model and validating media duration. No evidence found of system probing commands.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (3)
Low
SKILL.md:24-26SKILL.md:52-64SKILL.md:173
Static Backtick Alerts Are Markdown False Positives
The Ruby shell execution alerts come from Markdown inline code, tables, fenced bash examples, and prompt examples. SKILL.md does not contain executable Ruby code or a script body that runs these backticks automatically.
Line-number review confirms the detected backticks are Markdown formatting and command examples. No evidence found that the skill executes Ruby backticks.
Low
SKILL.md:82SKILL.md:95-97
Path Traversal Alerts Are Placeholder URL False Positives
The high path traversal alerts point to example URLs containing ellipses, such as media placeholders. These are not filesystem traversal sequences and do not instruct access to parent directories.
The flagged text is inside HTTPS placeholder examples for reference media. No evidence found of ../ path traversal or local file reads in those locations.
Low
SKILL.md:4-10SKILL.md:106-117SKILL.md:158-167
Weak Cryptography Alerts Are Text-Match False Positives
The weak cryptographic algorithm detections map to prose, headings, prompt guidance, or an exit-code section. No hash function, cipher, or cryptographic implementation is present in SKILL.md.
Review of the flagged lines found descriptive documentation only. No evidence found of MD5, SHA-1, weak ciphers, or cryptographic code.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable