Security audit

Fast Douyin Publish

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a real Douyin publishing helper, but it needs review because it stores reusable login sessions locally, can publish publicly without a final confirmation, and includes unexplained credential fields for other platforms.

Install only if you trust the publisher and specifically want automation that can post to a live Douyin account. Before using it, remove unrelated platform entries from config/accounts.json, protect or delete config/cookies/douyin.json when finished, avoid committing the config directory, and review the target account, video, title, tags, and description before running, especially in headless mode.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (7)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 89% confidence
Finding: The skill documentation describes local file access, config creation, cookie persistence, and log writing, but it does not declare corresponding permissions. Undeclared capabilities reduce transparency and can bypass user expectations or platform consent mechanisms, especially when handling authentication state and local files.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 93% confidence
Finding: The declared purpose focuses on publishing videos and generating captions, but the skill also stores reusable login cookies, maintains account configuration, writes publish history, and handles login sessions. This mismatch matters because users may consent to content publishing without realizing the skill also persists sensitive authentication artifacts and account-related data on disk.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The README explicitly states that login cookies are saved for reuse, but does not warn users that these cookies are authentication artifacts that can be stolen and reused to access the account. In the context of an automation tool that logs into Douyin, persistent session storage materially increases account-takeover risk if the local machine, repo directory, or generated config files are exposed.

Missing User Warnings

Medium

Confidence: 84% confidence
Finding: The feature description promotes one-click publishing and automatic metadata generation but does not clearly warn that local video files, titles, and tags will be uploaded to Douyin. This can lead to unintended disclosure of sensitive media or generated metadata, especially if users assume processing is local-only.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The security notes mention keeping cookies confidential, but they do not clearly state that login cookies and account-related files are stored persistently on disk and may enable account takeover or privacy leakage if accessed by others. Because these artifacts relate to active session state, local compromise or accidental sharing can have direct account impact.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The script proceeds from upload to clicking the final “发布” button automatically, with no explicit confirmation step immediately before the irreversible publish action. In a content-publishing tool, this increases the risk of accidental posting of the wrong media, title, tags, or account context, especially because the action affects a live external platform and may be hard to fully undo.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The code persists authenticated browser session state to disk under config/cookies without a clear warning, consent flow, or protection controls. If those files are readable by other local users, copied, committed, or exfiltrated, an attacker may be able to reuse the session to access or act on the Douyin account without reauthentication.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.