Douyin Creator Marketplace (Xingtu) Author Commerce Spread Info API

Call GET /api/douyin-xingtu/gw/api/aggregator/get_author_commerce_spread_info/v1 for Douyin Creator Marketplace (Xingtu) Author Commerce Spread Info through...

Security Scan

This is a coherent API-wrapper skill for JustOneAPI's Douyin/Xingtu endpoint that only requires node and a JUST_ONE_API_TOKEN; no unrelated credentials or suspicious installs are present — but note the token is passed as a query parameter which can increase leakage risk via logs/referrers.

Purpose & Capability

Name/description match the code and README: the skill calls JustOneAPI's GET /api/douyin-xingtu/... endpoint. Required binary (node) and the single env var JUST_ONE_API_TOKEN are appropriate for a small Node CLI wrapper around that API.

Instruction Scope

SKILL.md and bin/run.mjs limit behavior to constructing the endpoint URL, injecting the token, validating parameters, and performing an HTTP GET. They instruct the agent to request missing parameters and return the backend JSON. However, the implementation places the auth token in the query string (token parameter), which can cause exposure in logs, referrer headers, and other observability pipelines; the skill explicitly echoes backend payloads and errors to stdout/stderr, so sensitive response data could be printed.

Install Mechanism

No install spec; the skill includes a small Node script (bin/run.mjs) and relies on an existing node binary. There are no downloads or archive extraction steps in the manifest, so install risk is low.

Credentials

Only JUST_ONE_API_TOKEN is required and is the declared primary credential, which is proportionate for an API wrapper. Caveat: the token is sent as a query parameter by the included script, increasing risk of accidental leakage; consider using a scoped/revocable token or header-based auth if the API supports it.

Persistence & Privilege

The skill is not always-enabled, does not request persistent system-wide changes, and does not modify other skills. Default autonomous invocation is allowed (normal), and there is no elevated persistence requested.

Assessment

This skill appears to do exactly what it says: call JustOneAPI's Douyin/Xingtu endpoint using your JUST_ONE_API_TOKEN. Before installing: (1) Be aware the bundled script sends your token as a query parameter — query strings can be logged or leaked via referrers; prefer a header-based token or request a limited-scope token from JustOneAPI if possible. (2) The script prints full backend responses and error payloads to stdout/stderr, so avoid passing it tokens or sensitive parameters you don't want written to logs. (3) Verify the JustOneAPI service and token permissions (use least privilege and be ready to rotate the token). If you accept those trade-offs, the skill is internally consistent.

Douyin Creator Marketplace (Xingtu) Author Commerce Spread Info

Use this focused JustOneAPI skill for author Commerce Spread Info in Douyin Creator Marketplace (Xingtu). It targets GET /api/douyin-xingtu/gw/api/aggregator/get_author_commerce_spread_info/v1. Required non-token inputs are oAuthorId. OpenAPI describes it as: Get Douyin Creator Marketplace (Xingtu) author Commerce Spread Info data, including spread metrics, for creator evaluation for campaign planning and media buying.

Endpoint Scope

• Platform key: douyin-xingtu
• Endpoint key: gw/api/aggregator/get_author_commerce_spread_info
• Platform family: Douyin Creator Marketplace (Xingtu)
• Skill slug: justoneapi-douyin-xingtu-gw-api-aggregator-get-author-commerce-spread-info

Operation	Version	Method	Path	OpenAPI summary
gwApiAggregatorGetAuthorCommerceSpreadInfoV1	v1	GET	/api/douyin-xingtu/gw/api/aggregator/get_author_commerce_spread_info/v1	Author Commerce Spread Info

Inputs

Parameter	In	Required by	Optional by	Type	Notes
oAuthorId	query	all	n/a	string	Author's unique ID

Request body: none documented; send parameters through path or query arguments.

Version Choice

Use gwApiAggregatorGetAuthorCommerceSpreadInfoV1 for the documented v1 endpoint. There are no alternate versions grouped in this skill.

Run This Endpoint

Supported operation IDs in this skill: gwApiAggregatorGetAuthorCommerceSpreadInfoV1.

node {baseDir}/bin/run.mjs --operation "gwApiAggregatorGetAuthorCommerceSpreadInfoV1" --token "$JUST_ONE_API_TOKEN" --params-json '{"oAuthorId":"<oAuthorId>"}'

Ask for any missing required parameter before calling the helper. Keep user-provided IDs, cursors, keywords, and filters unchanged.

Environment

• Required: JUST_ONE_API_TOKEN
• Pass the token with --token "$JUST_ONE_API_TOKEN"; do not paste token values into chat messages, screenshots, or logs.
• Get a token from Just One API Dashboard.
• Authentication details: Just One API Usage Guide.

Output Focus

• State the operation ID and endpoint path used, for example gwApiAggregatorGetAuthorCommerceSpreadInfoV1 on /api/douyin-xingtu/gw/api/aggregator/get_author_commerce_spread_info/v1.
• Echo the required lookup scope (oAuthorId) before summarizing results.
• Prioritize fields that support this endpoint purpose: Get Douyin Creator Marketplace (Xingtu) author Commerce Spread Info data, including spread metrics, for creator evaluation for campaign planning and media buying.
• Return raw JSON only after the short, endpoint-specific summary.
• If the backend errors, include the backend payload and the exact operation ID.