ClawHub

Douyin Automation

v1.0.0

Puppeteer-based Douyin (TikTok China) video uploader. Automate login, upload and publish videos to Douyin Creator Platform using headless browser. 抖音视频自动化发布工...

⭐ 0· 82·0 current·0 all-time
by@chongjie-ran
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included code and scripts. Required binaries (node, npm, and a Chromium/Chrome binary) and the puppeteer dependency are appropriate for a headless-browser uploader. No unrelated credentials, config paths, or binaries are requested.
✓
Instruction Scope
SKILL.md instructs only about installing puppeteer and running the bundled login/upload/manage scripts. The instructions reference the local cookie file and browser user-data directory (both expected). There are no directives to read unrelated system files or send data to third‑party endpoints; runtime network activity targets Douyin pages for login/upload.
ℹ
Install Mechanism
Installation is a single npm dependency (puppeteer). This is expected for a Puppeteer tool, but note that puppeteer typically downloads a Chromium binary from upstream during npm install (network activity to package registry and chromium hosts). The install source is npm (traceable) rather than an arbitrary URL or extractor, which is moderate and expected for this purpose.
✓
Credentials
The skill requires no environment variables or external credentials. It stores cookies locally (douyin-cookies.json) and browser data under chrome-user-data/ in the skill directory — these are proportional to the stated functionality. No extra secrets (API keys/tokens) are requested.
ℹ
Persistence & Privilege
The skill does persist state locally (cookies and browser profile) within its directory, which is normal for a browser automation tool. always is false and the skill does not request elevated system-wide privileges or modify other skills' configs. Be aware that an agent invoking this skill autonomously could post using stored cookies (this is expected behavior but has policy/operational implications).
Assessment
This package appears to do what it claims: Puppeteer scripts to log in and upload to Douyin, storing cookies locally (douyin-cookies.json, permission 0600) and browser data in chrome-user-data/. Before installing: 1) review the included files if you need to be sure nothing hidden is occurring (all code is bundled). 2) Be aware npm install puppeteer will contact the npm registry and typically download a Chromium binary; perform installs in a trusted or isolated environment if you are concerned. 3) Stored cookies allow subsequent automated uploads — only enable autonomous agent invocation if you trust the agent's behavior (it could publish content using saved cookies). 4) If you require higher assurance, run the tool in a sandboxed account or container and verify network activity during install and first run.

Like a lobster shell, security has layers — review code before you run it.

automationvk97fgyzqe3gjekc0azwgj02w4x83w094douyinvk97fgyzqe3gjekc0azwgj02w4x83w094latestvk97fgyzqe3gjekc0azwgj02w4x83w094publishvk97fgyzqe3gjekc0azwgj02w4x83w094videovk97fgyzqe3gjekc0azwgj02w4x83w094

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
OSmacOS · Linux · Windows
Binsnode, npm
Any binchromium, google-chrome, chrome

Install

Nodenpm i -g puppeteer

Comments