OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates video generation via the ByteDance Volcengine API but introduces significant security risks by explicitly disabling SSL certificate verification. This exposes sensitive API keys to interception. Additionally, it relies on system-level command execution to download output files.
Detected behaviors
No alerts
No issues
2 files scanned · No issues
1 finding · Score: 86/100