Douyin Video Forge
v0.1.0抖音短视频全链路自动化制作。适用于：收到客户项目需要制作抖音推广视频、 策划短视频内容、生成视频脚本、分析抖音热点趋势、制作爆款短视频。 通过浏览器采集抖音热榜和视频数据，生成分段脚本，调用可灵API生成视频并拼接成片。
⭐ 1· 368·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match requested binaries and scripts: ffmpeg and yt-dlp are needed for download/processing, optional python + KLING_* env vars are used only for optional AI video generation. The presence of kling_api.py and transcribe.py is consistent with the stated optional video-generation and transcription capabilities.
Instruction Scope
SKILL.md directs the agent to use the built-in browser to read douyin.com pages, download public videos with yt-dlp, extract audio/frames with ffmpeg, and optionally call local Python CLIs. Those actions are within the skill's stated purpose. Two operational notes: (1) the skill auto-activates on many short-video related keywords — that can cause the agent to begin browsing/downloading when those triggers fire; (2) the skill's fallback behaviors include web_search and downloading content from arbitrary URLs (e.g., kling_elements images, video URLs) which are expected for this use case but worth awareness.
Install Mechanism
There is no remote installation spec in the registry metadata; the package is instruction-first and includes a local install.sh that copies files into ~/.openclaw/skills. install.sh does not fetch code from unknown hosts. This is lower risk than installers that download arbitrary archives from third-party URLs.
Credentials
No required env vars are declared for basic operation. KLING_ACCESS_KEY and KLING_SECRET_KEY are optional and used only for the optional Kling API video-generation path. The code reads those vars when invoking kling_api.py; keys are not hard-coded. This is proportionate to the optional capability.
Persistence & Privilege
always is false and the skill does not request elevated platform privileges. install.sh copies the skill into the user's skills directory (normal). The skill does not modify other skills' configurations or ask to persist unrelated credentials.
Scan Findings in Context
[pre-scan-none] expected: No regex/static scan findings were reported. The repository contains Python CLIs that perform outbound HTTP requests (kling_api.py uses httpx) which is expected for optional API integration; manual review of those scripts is still recommended.
Assessment
This skill appears to do what it says: scrape Douyin pages (via the agent/browser), download videos (yt-dlp), analyze them, and optionally call Kling API for AI video generation. Before installing: 1) Only set KLING_ACCESS_KEY/KLING_SECRET_KEY if you trust klingai.com and want automatic video generation; otherwise leave them unset. 2) If you will run the optional Python parts, inspect and install Python dependencies (pyjwt, httpx, faster-whisper) in an isolated environment (virtualenv) and review scripts/kling_api.py and scripts/transcribe.py for network calls; they will contact external services and may download generated video URLs or reference arbitrary image URLs. 3) Be aware the skill will download public videos and write temporary files (mktemp); consider running in a sandbox if you have concerns about sensitive environments. 4) Note the README/CLAUDE.md mention future plans (fingerprint randomization, proxy rotation) — those are not implemented here but would increase risk if added. If you are not comfortable with automated browsing/downloading or external API calls, use the skill only in its script-generation / analysis mode (which works without KLING keys) or avoid installing it.Like a lobster shell, security has layers — review code before you run it.
latestvk97ddjmfxgfm1j98w19fakypcn8351jw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
OSmacOS · Linux · Windows
Binsffmpeg, yt-dlp