bytedance/deer-flow video-generation
Checked the catalogued skill at video-generation.
A set by no findings on this axis
A set by no findings on this axis
A set by no findings on this axis
No issues flagged by the static checks in the scanned files.
10 suppressed by AI triage
The script performs an HTTP request to a known API host (api.minimaxi.com) as part of normal operation.
The code polls a known video generation API endpoint using requests, which is legitimate.
Polling a Google Generative Language API for operation status is a standard, non-malicious network call.
The outbound request targets a public Google API, not an untrusted host.
Retrieving a file URL from the same known API host is part of normal functionality.
Downloading content from the API's download URL is legitimate.
Posting a video generation request to a known API endpoint is expected behavior.
Downloading a file using the API key from a public API endpoint is standard.
Posting to a Google Generative Language endpoint with a valid API key is normal.
The request targets a public Google API, not an untrusted external host.