抖音KOL对标账号
v1.0.0使用此技能在抖音平台搜索和筛选 KOL、达人、博主。用户想找/搜索/推荐/筛选某个领域的达人，或想找带货博主、带货达人、找合作达人进行商业合作时，使用此技能。
⭐ 0· 100·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description (search/filter Douyin KOLs) align with the instructions that call a third-party API to perform searches. Note: the package metadata at the top of the report lists 'Required env vars: none', but the SKILL.md declares a required AISKILLS_API_KEY — this metadata mismatch should be corrected.
Instruction Scope
SKILL.md explicitly instructs the agent to POST search params (keyword, category) and skillId to https://ai-skills.ai/api/execute and to include X-API-Key. It states it does not send user conversation context. The instructions do not ask the agent to read local files, other env vars, or system state.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or installed by the skill itself.
Credentials
The only credential required in SKILL.md is AISKILLS_API_KEY, which is proportionate to a hosted API service. However, the top-level registry metadata omitted this required env var, creating an inconsistency the user should be aware of.
Persistence & Privilege
always is false and the skill is user-invocable. The skill does not request persistent system privileges or modify other skills. Autonomous invocation is allowed (default) but not escalated by 'always: true'.
Assessment
This skill is coherent: it calls ai-skills.ai with an API key to return Douyin/KOL search results. Before installing, consider: (1) Trustworthiness — verify ai-skills.ai's reputation, privacy policy, and terms because your queries and the API key are sent to that third party. (2) Use a revocable, limited-scope API key and monitor its usage/quota so you can revoke it if abused. (3) Avoid sending any sensitive or personally identifying data in search keywords. (4) Ask the skill author or registry maintainer to fix the metadata mismatch (registry says no env vars but SKILL.md requires AISKILLS_API_KEY) and to provide a homepage or contact info. If you need stronger assurance, request an explicit data retention statement from the service or prefer an alternative with a documented provider.Like a lobster shell, security has layers — review code before you run it.
latestvk97bjps1c669fyg1es8vsezdm583zxz8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.