T05 · Unauthorized Access and Privilege Escalation
Warning
- Location
SKILL.md:24- Finding
Intentional Anti-Hotlink Access-Control Bypass Using a Forged Referer Header
- Content
View full analysis
- Remediation
View remediation
Security audit
gnview-douyin-video-download
Security checks for vulnerabilities and agentic risk
Overview
This skill is a small Markdown-only download helper, but its stated purpose is to bypass Douyin anti-hotlink access controls using a forged Referer header.
Review this carefully before installing. It is not a conventional malware package, but it teaches an agent to bypass a platform access-control mechanism for video downloads. Only use authorized platform features or content you have explicit permission to download, and consider legal, terms-of-service, copyright, and account consequences.
Vulnerability Patterns
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The skill explicitly instructs users to bypass Douyin anti-hotlink protections by spoofing a Referer header and frames this as a way to evade 403 controls. Even though this is not malware, it facilitates circumvention of a platform access control mechanism and omits legal, policy, and account-risk warnings, increasing the likelihood of misuse and terms-of-service violations.
- Content