Douyin Orchestrator
Security checks across malware telemetry and agentic risk
Overview
The skill is an instruction-only orchestrator that is internally consistent with its stated purpose (downloading Douyin videos → transcribing → analyzing) but depends on other, unseen modules and browser-executed JS, so review those before trusting it fully.
This skill is an orchestration recipe (no code bundled) and appears coherent for video→transcript→analysis tasks, but it relies on other skills (douyin-fetcher, douyin-transcriber, douyin-analyzer) which are not included — review those modules' SKILL.md/code before installation. Be cautious about the browser evaluate step: executing arbitrary JavaScript in a page context can access cookies, auth tokens, or perform network requests, so only run this with a browser/profile you trust. Confirm the whisper-asr Docker image and any ffmpeg installation come from trusted sources. Verify and replace placeholder paths (/path/to/...) with safe directories and ensure you are comfortable the skill will write transcripts/videos and update index files. If you need higher assurance, request the source for the referenced submodules or run the workflow in an isolated environment (container/VM) first.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
VirusTotal findings are pending for this skill version.