Versioned security assessment

Report ID: SA-62E2A730

7/5/2026, 8:51:54 PM

seedance-v2 security assessment v3

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
seedance-v2
Version
v3
Maintainer
runcomfy-com
Source
github.com/runcomfy-com/skills/tree/main/seedance-v2/
Coverage
1 Files scanned · 182 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

High

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static command detections are Markdown backticks, schema examples, or prompt examples. Confirmed risks are the RunComfy and npm commands, the documented outbound Model API call, and a repository mismatch in the install instructions. No prompt injection attempt or hidden data exfiltration was found in SKILL.md.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 182 Lines analyzed

11 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 8 evidence locations

Filesystem access

May read or write local files.

Observed in 5 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 37 evidence locations

Capability review items (10)
Medium
SKILL.md:10
Ruby/shell backtick execution
Calls `runcomfy run bytedance/seedance-v2/pro` through the local
The skill states it calls the local runcomfy CLI, which executes an external program and submits data to RunComfy. This is intended functionality but still needs user consent and command review.
Medium
SKILL.md:24-26
Ruby/shell backtick execution
```bash
The fenced command runs npx skills add with global installation from a community repository. That can fetch and install unaudited code, so it is a real supply-chain command risk.
Medium
SKILL.md:46-47
Ruby/shell backtick execution
1. **RunComfy CLI** — `npm i -g @runcomfy/cli`
The prerequisite directs a global npm install of @runcomfy/cli. Installing global packages can execute third-party package lifecycle code and change local tooling.
Medium
SKILL.md:47-48
Ruby/shell backtick execution
2. **RunComfy account** — `runcomfy login` opens a browser device-code flow.
runcomfy login invokes an external CLI authentication flow and creates local credentials. It is normal setup, but it is still an external command with credential impact.
Medium
SKILL.md:70-74
Ruby/shell backtick execution
```bash
The bash example runs runcomfy with user-supplied input and an output directory. This is intended, but it executes a local CLI and writes generated files.
Medium
SKILL.md:78-87
Ruby/shell backtick execution
```bash
The bash example runs runcomfy with a prompt, reference URL, and output directory. This is intended, but it executes a local CLI and writes generated files.
Medium
SKILL.md:91-100
Ruby/shell backtick execution
```bash
The bash example runs runcomfy with image, video, and audio reference inputs. This is intended, but it executes a local CLI and sends user-provided media references.
Medium
SKILL.md:173
Ruby/shell backtick execution
The skill invokes `runcomfy run bytedance/seedance-v2/pro` with a JSON body matching the schema. The
This line confirms the CLI posts requests to the RunComfy Model API and downloads generated output. That network and filesystem behavior is central to the skill and must be disclosed.
Medium
SKILL.md:177
Ruby/shell backtick execution
- **Token storage**: `runcomfy login` writes the API token to `~/.config/runcomfy/token.json` with m
The line describes runcomfy login storing an API token under the user config directory. That makes the command sensitive even though the storage mode is documented.
Low
SKILL.md:173
Hardcoded URL
The skill invokes `runcomfy run bytedance/seedance-v2/pro` with a JSON body matching the schema. The
This line documents outbound requests to model-api.runcomfy.net and downloads from RunComfy domains. It is an intended external data transfer and output download path.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 High
SKILL.md:20SKILL.md:24-25
Repository Mismatch in Installation Instructions
SKILL.md links and installs agentspace-so/runcomfy-skills while this marketplace audit covers runcomfy-com. Users could install content outside the audited source.
The GitHub link and npx install command both name agentspace-so/runcomfy-skills. A benign repository move is possible, but the published install path differs from the audited source.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    Repository mismatch in install instructions
    Update the GitHub link and npx install command to the audited runcomfy-com source, or clearly document and audit the agentspace-so source.
  2. FIX-002
    Medium
    Global community install command
    Avoid recommending global community installs, or require users to review the repository and pin a trusted version before installing.
  3. FIX-003
    Medium
    Local CLI execution with generated downloads
    Require user confirmation before running runcomfy commands, and validate output directories before downloading generated files.
  4. FIX-004
    Low
    Outbound prompt and media transfer
    Tell users that prompts and reference media are sent to RunComfy, and ask for consent before submitting sensitive content.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable