Douyin Creator Cn

• Analyzed: May 11, 2026, 4:14 AM
• Findings: 1
• Version: 1.0.0
• Hash: b7c18d6ac142ab5ae6a7638c3af5bd2b3f89ebb176bb4fb2c57e699af9c13e6d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides simple shell scripts for Douyin content creation assistance. All scripts (`analyze.sh`, `tags.sh`, `time.sh`, `title.sh`) primarily use `echo` for output and `case` statements or `grep` for basic string processing. User inputs are consistently double-quoted when used in commands, which effectively prevents common shell injection vulnerabilities. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the AI agent in `SKILL.md` or `README.md`. The scripts explicitly state they simulate data rather than making real API calls, further reducing risk.