Seedance 2.0 Video — agentic threat model
Seedance 2.0 presents moderate agentic risk, primarily centered around its generative capabilities (such as deepfakes, misinformation, and copyright issues) and API exposure, rather than autonomous system execution or external tool misuse.
OWASP AIVSS score rationale
| Autonomy of Action | 0.30 | |
| Goal-Driven Planning | 0.50 | |
| Self-Modification | 0.00 | |
| Dynamic Tool Use | 0.20 | |
| Persistent Memory | 0.30 | |
| Contextual Awareness | 0.40 | |
| Dynamic Identity | 0.00 | |
| Multi-Agent Interactions | 0.10 | |
| Non-Determinism | 0.80 | |
| Opacity & Reflexivity | 0.80 |
Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.
MAESTRO 7-layer threat model
Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.
Utilizes advanced generative foundation models for video, audio, and text-to-image synthesis. Primary threats include adversarial prompt injection to bypass safety filters, model reprogramming, and output misalignment (e.g., generating harmful or copyrighted content).
Not certain from the listing — processes user-provided text prompts and source images for image-to-video generation. Potential threats include data exfiltration of private user assets and data poisoning if user inputs are used for downstream fine-tuning.
The 'AI Director' system acts as the orchestration framework, planning camera angles, transitions, and pacing. Vulnerabilities include prompt injection manipulating the planning logic to generate unintended or malicious visual sequences.
Not certain from the listing — likely deployed on high-performance GPU infrastructure with API access. Threats include API abuse, resource exhaustion (GPU denial of service), and potential container escape during heavy rendering tasks.
Not certain from the listing — there is no mention of built-in content moderation, output guardrails, or observability tools to detect and block the generation of deepfakes, explicit content, or policy violations.
Not certain from the listing — no explicit compliance frameworks (e.g., GDPR, EU AI Act compliance for deepfakes) or access control mechanisms are detailed for the API or platform.
Not certain from the listing — while it provides API access for developer integration, there is no native multi-agent coordination or marketplace ecosystem described.
MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).