← 返回 Skills 市场
Seedance Video
作者
lovensky1992-wk
· GitHub ↗
· v1.0.2
· MIT-0
422
总下载
0
收藏
1
当前安装
7
版本数
在 OpenClaw 中安装
/install seedance-video-gen
功能描述
使用字节跳动 Seedance 生成 AI 视频：文生视频、图生视频（首帧/首尾帧/参考图）、 异步任务查询。支持 Seedance 2.0（多模态输入、视频续生、视频编辑）等多个模型。 Use when: (1) 用户说"生成视频"/"做个视频"/"AI视频"/"text to video", (2) 用户要求...
安全使用建议
This skill implements Seedance video generation and the included seedance.py CLI will call ark.cn-beijing.volces.com and requires an ARK_API_KEY. Before installing or enabling it: (1) Confirm the skill metadata is corrected to list ARK_API_KEY as a required env var (and to disclose any optional Feishu tokens if you expect to use that feature). (2) Verify the skill author/owner and source (the package _meta and registry owner differ and README/LICENSE conflict). (3) Review seedance.py yourself — it base64-encodes local images and uploads them to the listed API endpoint and will download generated videos to a local folder (~/Desktop in examples). (4) If you don't trust the source, don't set ARK_API_KEY in environments with sensitive permissions. (5) Ask the publisher to fix metadata, license statement, and disclose any optional integrations (Feishu) before installing. If those items are clarified, the skill looks coherent for its advertised purpose; until then treat it as suspicious.
功能分析
Type: OpenClaw Skill
Name: seedance-video-gen
Version: 1.0.2
The skill bundle contains a potential shell injection vulnerability in 'seedance.py' within the 'cmd_wait_logic' function, where 'os.system' is used to open a file using a 'task_id' retrieved directly from a remote API response without sanitization. While the script's behavior of reading local images and using the 'ARK_API_KEY' aligns with its stated purpose of video generation via the Volcengine Ark API (ark.cn-beijing.volces.com), the use of unsafe shell execution on external data is a significant security flaw.
能力标签
能力评估
Purpose & Capability
The SKILL.md and seedance.py clearly require an ARK_API_KEY to call the Volcengine/Ark API (and SKILL.md shows commands that use it). However the registry metadata at the top of the package claims "Required env vars: none" and "Primary credential: none" — that is an incoherence. Other docs (CHANGELOG) also mention optional Feishu integration and an app_access_token, which is not declared in the skill metadata either. Owner/slug/version information in _meta.json and registry metadata differ, and README/LICENSE present conflicting license statements (README says MIT, LICENSE file is Apache-2.0). These mismatches affect provenance and what credentials will actually be needed.
Instruction Scope
SKILL.md instructs the agent to (a) check ARK_API_KEY, (b) run the included seedance.py CLI which uploads text/images (local files may be base64-encoded) to ark.cn-beijing.volces.com, polls task status, and optionally downloads the resulting MP4 to ~/Desktop. Those instructions are consistent with a text/image→video integration and do not instruct reading unrelated system secrets or files beyond the user-supplied media. The CHANGELOG and other docs mention additional flows (Feishu upload) not surfaced in the primary SKILL.md, which may prompt the user or integrator to add more credentials later — that is scope creep in the repository documentation, even if not used by the main CLI.
Install Mechanism
There is no install spec and the skill is instruction-only plus a small Python CLI (seedance.py). Nothing in the package downloads remote code at install time. This is a lower-risk install mechanism; the included Python script will run network calls at runtime, which is expected for this purpose.
Credentials
The runtime requires ARK_API_KEY (seedance.py calls get_api_key and exits if it's missing), but the package metadata omitted declaring this required env var. The CHANGELOG mentions Feishu credentials for an optional video-sending guide (app_access_token), which are also not declared. Requiring ARK_API_KEY is proportionate to the stated purpose, but the metadata omission is misleading and could cause surprise or hidden credential requests later.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent settings. It runs as a normal, user-invocable skill. It downloads results to a user-specified directory (default examples use ~/Desktop) and executes a macOS 'open' command only when showing results — this is limited in scope.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install seedance-video-gen - 安装完成后，直接呼叫该 Skill 的名称或使用
/seedance-video-gen触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
Weekly sync
v1.0.1
Daily sync
v0.1.3
Daily sync
v0.1.2
Daily sync
v0.1.1
Daily sync
v0.1.0
Daily sync
v1.0.0
Initial release: AI video generation using ByteDance Seedance models
元数据
常见问题
Seedance Video 是什么？
使用字节跳动 Seedance 生成 AI 视频：文生视频、图生视频（首帧/首尾帧/参考图）、 异步任务查询。支持 Seedance 2.0（多模态输入、视频续生、视频编辑）等多个模型。 Use when: (1) 用户说"生成视频"/"做个视频"/"AI视频"/"text to video", (2) 用户要求... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 422 次。
如何安装 Seedance Video？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install seedance-video-gen」即可一键安装，无需额外配置。
Seedance Video 是免费的吗？
是的，Seedance Video 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Seedance Video 支持哪些平台？
Seedance Video 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Seedance Video？
由 lovensky1992-wk（@lovensky1992-wk）开发并维护，当前版本 v1.0.2。
推荐 Skills