Douyin Orchestrator
v1.0.0抖音视频转录工作流编排。从抖音链接下载视频、转录语音、分析内容，输出结构化成果。编排调用 douyin-fetcher、douyin-transcriber、douyin-analyzer 三个独立模块。
⭐ 0· 42·0 current·0 all-time
byDon Li@don068589
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the instructions: it orchestrates three submodules (fetcher, transcriber, analyzer), declares no unrelated env vars or installs, and lists reasonable prerequisites (browser, ffmpeg, Docker). The files and pointers are consistent with an orchestrator role.
Instruction Scope
SKILL.md limits itself to orchestration steps, file locations, and calling other skills; it instructs the agent to run browser actions (including evaluate with arbitrary JS) and to read/write user paths (transcripts, videos, index files). These actions are coherent for a fetch/transcribe/analyze workflow but carry intrinsic risk (browser-evaluated JS can access page context, cookies, or cause network requests). The skill itself does not instruct reading unrelated system files or environment variables.
Install Mechanism
No install spec or external downloads — instruction-only. This minimizes direct install risk; nothing is written to disk by the skill package itself.
Credentials
No environment variables, credentials, or config paths are requested. The skill instead expects local tools/containers (ffmpeg, Docker/whisper) which are proportionate to media processing.
Persistence & Privilege
always:false and normal autonomous invocation. The skill instructs saving files and updating index markdowns under user paths (placeholders shown). This is expected for a workflow that persists transcripts, but users should confirm the exact filesystem paths and permissions before use.
Assessment
This skill is an orchestration recipe (no code bundled) and appears coherent for video→transcript→analysis tasks, but it relies on other skills (douyin-fetcher, douyin-transcriber, douyin-analyzer) which are not included — review those modules' SKILL.md/code before installation. Be cautious about the browser evaluate step: executing arbitrary JavaScript in a page context can access cookies, auth tokens, or perform network requests, so only run this with a browser/profile you trust. Confirm the whisper-asr Docker image and any ffmpeg installation come from trusted sources. Verify and replace placeholder paths (/path/to/...) with safe directories and ensure you are comfortable the skill will write transcripts/videos and update index files. If you need higher assurance, request the source for the referenced submodules or run the workflow in an isolated environment (container/VM) first.Like a lobster shell, security has layers — review code before you run it.
latestvk97aqa5a14d2z6nhmyy82mwnfh840pke
License
MIT-0
Free to use, modify, and redistribute. No attribution required.