抖音视频发布

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill clearly aims to publish Douyin videos, but it gives the agent authority to post publicly using a logged-in browser session and adds a fixed location without explicit final user approval.

Before using this skill, confirm the logged-in Douyin account, the exact video file, title, tags, and whether a location should be added. Do not let it click Publish until you have reviewed and approved the final preview.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistake in the selected video, title, tags, account, or visibility could result in unintended public content being posted to the user's Douyin account.

Why it was flagged

The browser automation workflow directly performs the final public publish action, but the artifact does not require explicit user confirmation immediately before posting.

Skill content
检查预览无误
- 点击「发布」按钮
Recommendation

Require the user to confirm the exact account, video file, title, tags, location, and publish action before clicking the final Publish button.

What this means

The agent can act through the user's authenticated Douyin creator session during the workflow.

Why it was flagged

The skill uses a logged-in browser profile and Douyin creator account, which is expected for publishing but grants real account authority.

Skill content
浏览器:OpenClaw Chrome扩展 (profile=chrome)
- 账号:需要登录抖音创作者账号
Recommendation

Use a dedicated browser profile or account where possible, and confirm the logged-in account before publishing.

What this means

The published post may include inaccurate or unwanted location metadata, which can affect privacy, authenticity, and audience trust.

Why it was flagged

The skill instructs the agent to add a specific location by default for exposure, even though that location may not match the user's video or intent.

Skill content
搜索「苏州中心」并选择
...
地理位置选择「苏州中心」可提升曝光
Recommendation

Ask the user whether to add a location and which location to use; do not apply a fixed location by default.