抖音视频发布
v1.0.0抖音视频发布。使用浏览器自动化在抖音创作者平台发布视频。当用户说"发布视频到抖音"、"发抖音"时使用此技能。
⭐ 4· 1.4k·10 current·10 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name and description (publish videos to Douyin) align with the runtime instructions (open the creator page, upload a local MP4, fill title/tags/location, click Publish). However the SKILL.md explicitly depends on 'OpenClaw Chrome extension (profile=chrome)' and 'Browser Relay' for browser automation even though the skill's metadata lists no required binaries, extensions, endpoints, or credentials; that omission is a mismatch worth noting.
Instruction Scope
Instructions direct automated interaction with the user's browser and uploading a local video file (expected). They do not request explicit credentials but require a logged-in Douyin creator account. The SKILL.md asks the agent to use Browser Relay (external relay/service) to control the browser — this is not described further and could result in agent data (video file, session cookies) being relayed to an external endpoint. There are no instructions to read unrelated files or env vars.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it doesn't write code to disk or install packages. That is low-install-risk and consistent with the documented behavior.
Credentials
The skill declares no required environment variables or credentials (good), but it requires a logged-in Douyin account and an active Browser Relay/Chrome extension. The metadata does not declare or explain how Browser Relay or extension authentication is handled. Because uploading a local file and controlling a logged-in browser can expose video content and session cookies, the lack of explicit credential/relay declaration is a proportionality/clarity concern.
Persistence & Privilege
always is false, user-invocable is true, and there is no install or config change request. The skill does not request permanent presence or modify other skills. Privileges requested are typical for a runtime automation instruction-only skill.
What to consider before installing
This skill appears to be what it claims (automating a Douyin creator upload), but exercise caution before enabling it: 1) It depends on an OpenClaw Chrome extension and a 'Browser Relay' for automation that are not declared in the skill metadata—confirm what Relay endpoint and extension are used and whether you trust them. 2) Using the skill will require the agent to access a local video file and control a browser logged into your Douyin account; that can expose your video content and session cookies. Prefer logging in manually and only connecting an automation channel you control. 3) Do not provide account credentials to the skill; if possible, test on a throwaway account first. 4) If you plan to allow autonomous invocation, consider restricting that until you verify the extension/relay behavior. If you want a lower-risk alternative, run the upload manually in your browser or use an officially documented Douyin API or verified integration that clearly documents credential handling.Like a lobster shell, security has layers — review code before you run it.
douyinvk97ffvc0dr6k7d7nntn1ar3m9h8278t8latestvk97ffvc0dr6k7d7nntn1ar3m9h8278t8publishvk97ffvc0dr6k7d7nntn1ar3m9h8278t8videovk97ffvc0dr6k7d7nntn1ar3m9h8278t8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
