ClawHub

Douyin (TikTok China) API

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward JustOneAPI Douyin data wrapper, but users should be careful because its API token is sent as a URL query parameter.

Install only if you trust JustOneAPI with your Douyin-related queries and API token. Use a dedicated or least-privilege token if available, avoid sharing logs or full request URLs, and rotate the token if it may have been exposed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (13)

Description-Behavior Mismatch

Medium
Confidence
93% confidence
Finding
The top-level description materially understates the skill's actual capabilities. A user or orchestrating agent could believe the skill is limited to profile/video-detail retrieval while it also supports comment harvesting, search, and share-link resolution, increasing the chance of overbroad data collection and consent bypass.

Missing User Warnings

Medium
Confidence
99% confidence
Finding
The skill sends the API token as a query parameter, which is commonly logged by proxies, servers, browser histories, observability tooling, and intermediary infrastructure. Even over HTTPS, query-string secrets have broader accidental exposure risk than Authorization headers or request bodies, and this skill provides no warning that the token will be embedded in the URL.

Vague Triggers

Medium
Confidence
82% confidence
Finding
The operations are described in broad research/monitoring terms without clear trigger constraints, approval requirements, or limitations on when the agent should call them. That makes unintended invocation more likely, especially for search and comment-related endpoints that can collect third-party data beyond the user's immediate request.

Missing User Warnings

High
Confidence
98% confidence
Finding
The skill sends access tokens plus user identifiers, search terms, URLs, and content-related identifiers to api.justoneapi.com, but the manifest provides no user-facing warning about external transmission or privacy implications. This creates a significant risk of silent exfiltration of sensitive credentials and query data to a third-party service.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
Passing an access token in the query string is risky because query parameters are commonly logged by servers, proxies, analytics systems, browser history, and monitoring tools. In an API skill context, this increases the chance of credential leakage and unauthorized reuse of the token if logs or URLs are exposed.

Credential Access

High
Category
Privilege Escalation
Content
"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",
Confidence
97% confidence
Finding
Access token

Credential Access

High
Category
Privilege Escalation
Content
"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",
Confidence
97% confidence
Finding
Access token

Credential Access

High
Category
Privilege Escalation
Content
"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",
Confidence
97% confidence
Finding
Access token

Credential Access

High
Category
Privilege Escalation
Content
"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",
Confidence
97% confidence
Finding
Access token

Credential Access

High
Category
Privilege Escalation
Content
"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",
Confidence
97% confidence
Finding
Access token

Credential Access

High
Category
Privilege Escalation
Content
"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",
Confidence
97% confidence
Finding
Access token

Credential Access

High
Category
Privilege Escalation
Content
"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",
Confidence
97% confidence
Finding
Access token

Credential Access

High
Category
Privilege Escalation
Content
"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",
Confidence
97% confidence
Finding
Access token

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal