dy-prohibited-word(抖音违禁词检测)

PassAudited by ClawScan on May 9, 2026.

Overview

This skill appears aligned with Douyin prohibited-word checking, but users should know it can read provided files or URLs, send extracted text to a configured HTTPS API, and write an output text file.

Before installing, confirm the detection API endpoint is trusted, install the Python and Playwright dependencies from reputable sources, and use the skill only with files, URLs, and draft copy you are comfortable sending for compliance checking.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private draft copy, extracted file text, or webpage text may be transmitted to the configured API endpoint.

Why it was flagged

The script sends the user’s text content to the configured sensitive-word detection API for analysis.

Skill content
"content": content, "platform": "抖音", "source": "抖音违禁词查询-SkillHub"
Recommendation

Use only a trusted HTTPS endpoint, preferably one owned by the deployer or covered by an appropriate data-processing agreement.

What this means

The agent may access local file paths or web pages the user provides and leave a plain-text optimized copy on disk.

Why it was flagged

The workflow uses local script execution to read provided files, fetch provided web pages, and create a result text file.

Skill content
先调用 `python scripts/check_sensitive_words.py --file=/path/to/file.txt --extract-only` ... `--url=https://example.com --extract-only` ... 写入文件 `./抖音_优化文案_{随机6位数字}.txt`
Recommendation

Only provide files and URLs intended for checking, and delete generated output files if they contain sensitive business copy.

What this means

Deployers must install and maintain these dependencies; browser/runtime setup can affect local environment security.

Why it was flagged

The skill depends on pinned Python packages and a Playwright Chromium browser installation for document and dynamic webpage extraction.

Skill content
python-docx==1.1.0 ... beautifulsoup4==4.12.3 ... playwright==1.58.0 ... playwright install chromium
Recommendation

Install dependencies from trusted package sources, keep Playwright/Chromium updated, and review the full script before production use.