seedance2 — agentic threat model
Seedance 2.0 is primarily a generative AI tool rather than an autonomous agent, presenting low agentic risk but high potential for misuse in generating deepfakes, copyright infringement, or bypassing content safety filters.
OWASP AIVSS score rationale
| Autonomy of Action | 0.10 | |
| Goal-Driven Planning | 0.10 | |
| Self-Modification | 0.00 | |
| Dynamic Tool Use | 0.00 | |
| Persistent Memory | 0.00 | |
| Contextual Awareness | 0.20 | |
| Dynamic Identity | 0.00 | |
| Multi-Agent Interactions | 0.00 | |
| Non-Determinism | 0.80 | |
| Opacity & Reflexivity | 0.80 |
Scored with the canonical OWASP AIVSS formula (AIVSS calculator reference); agentic risk factors estimated from the agent’s described capabilities.
MAESTRO 7-layer threat model
Per-layer threats for this agent. Layers tagged “not certain from listing” are general, caveated commentary where the public description didn’t pin that layer.
Uses a proprietary Dual Branch Diffusion Transformer architecture to generate video and audio. Primary threats include adversarial prompt injection to bypass safety filters, model stealing of ByteDance's closed-source IP, and output misalignment (e.g., generating harmful or offensive content).
Not certain from the listing — details on training data ingestion, vector stores, or the handling of user-uploaded images are omitted. Potential threats include the exfiltration of proprietary user-uploaded images and training data poisoning.
Not certain from the listing — Seedance 2.0 operates as a direct inference pipeline rather than an agentic framework with complex orchestration, planning, or tool-calling capabilities.
Not certain from the listing — the hosting infrastructure (likely ByteDance's cloud environment) is not detailed. Standard threats include GPU resource exhaustion (DoS) and unauthorized API access.
Not certain from the listing — there is no mention of built-in content moderation guardrails, output filtering, or logging mechanisms to detect and block the generation of deepfakes or CSAM.
Not certain from the listing — compliance with regional AI regulations (such as the EU AI Act regarding deepfakes and watermarking) or enterprise access controls is not specified.
Not certain from the listing — the agent operates as a standalone horizontal tool with no described multi-agent coordination or marketplace ecosystem integrations.
MAESTRO — the 7-layer agentic threat-modeling framework (Cloud Security Alliance / Ken Huang).