ClawHub
Back to skill

Security audit

dy-video-to-text

Security checks across malware telemetry and agentic risk

Overview

This Douyin video skill is purpose-aligned and disclosed, with some ordinary privacy and network-use caveats.

Install only if you are comfortable sending Douyin links to Douyin/ByteDance and video URLs to Alibaba Cloud for transcription. Use the OpenClaw secrets mechanism for DASHSCOPE_API_KEY, watch API usage costs, prefer a virtual environment for dependencies, and avoid pasting text that contains unrelated private URLs before the Douyin link.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Context-Inappropriate Capability

Medium
Confidence
98% confidence
Finding
The parser extracts the first URL from arbitrary input and fetches it without restricting the domain to Douyin-owned hosts. This can be abused as an SSRF-like outbound request primitive, causing the agent to contact attacker-chosen URLs, follow redirects, and potentially interact with internal or sensitive network locations depending on where the skill runs.

Missing User Warnings

Low
Confidence
83% confidence
Finding
The README promotes downloading watermark-free videos to a local file but does not tell users that the skill writes files to their system or where those files will be stored. This can lead to unexpected filesystem modifications, confusion about saved content, and increased risk when an agent executes the skill automatically on behalf of a user.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.