seedance2.0

字节跳动 Seedance 2.0 AI 视频生成技能，支持文生图、文生视频，提供申请指南和快速生成封装

Do not install or run this skill without clarifying these mismatches. Specifically: - Confirm provenance: ask the publisher for source/origin (homepage, repo) and why metadata claims 'instruction-only' while the bundle contains code and node_modules. - Verify required credentials and install steps: the skill needs ARK_API_KEY and ARK_BASE_URL and requires Node/Bun to run; these should be declared in the registry metadata before use. - Audit seedance2.0.ts: inspect the TypeScript code to confirm it only calls the expected Seedance endpoints and does not exfiltrate other environment variables or arbitrary files. - Be cautious with .env: the package includes dotenv which will load .env from the working directory and can use DOTENV_KEY to decrypt .env.vault — avoid running this skill where unrelated secrets are present. - Run in a sandboxed environment first (isolated workspace/container) and monitor outbound network requests, filesystem writes, and which environment variables are read. - If you proceed, provide only a scoped Ark API key with minimal privileges and do not reuse high-privilege or cloud-wide credentials. Fixes that would raise confidence: updated registry metadata listing ARK_API_KEY and required runtime (node/bun), an explicit install spec, and a publicly verifiable source repo (or signed release) so code provenance can be validated.

Type: OpenClaw Skill Name: seedance-2-0 Version: 1.0.1 The skill is a functional wrapper for the ByteDance Seedance 2.0 AI video generation API, providing tools for video generation and a guide for whitelist applications. It includes a legitimate partner referral link for Volcengine (volcengine.com) and uses the 'dotenv' library for configuration management. Although the metadata and library changelogs contain anomalous future-dated entries (e.g., version 16.6.1 dated 2025), the code logic in 'seedance2.0.ts' and the included 'node_modules' is consistent with the stated purpose and lacks any evidence of malicious intent, data exfiltration, or unauthorized execution.