Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

TikHub API 工具(KK版)

v1.1.0

TikHub API 多平台数据爬取工具,支持抖音/TikTok/B站等。当用户提到:(1) 爬取抖音/TikTok/B站视频或评论;(2) 获取用户信息/粉丝列表;(3) 批量下载无水印视频;(4) 抖音链接转文字(下载→音频→Whisper pipeline);(5) 调用 TikHub API。

0· 67·0 current·0 all-time
bykk.Tang@kk-kingkong
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (TikHub API crawler for Douyin/TikTok/Bilibili/etc.) aligns with the provided Python code and SKILL.md which call TikHub endpoints, download videos, fetch comments, and transcribe audio. However the registry metadata declares no required env vars while the code and docs clearly expect a TIKHUB_API_KEY (and optionally TIKHUB_BASE_URL). Also SKILL.md relies on an external tool (mcporter/MCP) and preconfigured MCP servers — that external dependency is not reflected in install metadata.
Instruction Scope
Runtime instructions and code operate within the expected scope (call TikHub API, curl video URLs, run ffmpeg/whisper). They instruct reading the user's workspace config and .env (~/.openclaw/workspace/config/mcporter.json and ~/.openclaw/workspace/.env) to obtain MCP settings and API key — which is necessary for operation but is sensitive. One example snippet hardcodes '/Users/kk/.openclaw/workspace/.env' which is suspicious (likely a leftover from the author's environment) and could cause the agent to attempt reading a specific user's path.
Install Mechanism
There is no automated install spec (instruction-only + included Python scripts). No remote archives or installers are fetched by the skill. A requirements.txt is present (requests, whisper variants, ffmpeg) — installing these is up to the user/environment. This is a low-risk install pattern compared to downloading arbitrary binaries.
Credentials
The skill needs a TikHub API key (TIKHUB_API_KEY) and optionally TIKHUB_BASE_URL — both reasonable and proportionate to its functionality. However, the registry metadata declares no required env vars while the code reads an API key from environment or from ~/.openclaw/workspace/.env. That mismatch is an inconsistency you should verify before use. The code searches ~/.openclaw/workspace/.env automatically, which means a locally stored secret will be read without an explicit registry declaration.
Persistence & Privilege
The skill does not request always:true, does not attempt to modify other skills or system-wide agent settings, and only writes typical output files (downloads, transcripts). It runs subprocesses (curl, ffmpeg, whisper) which is expected for this functionality and not itself a privilege escalation.
What to consider before installing
What to check before installing/using: - Confirm how you will provide the TikHub API key. The code expects TIKHUB_API_KEY (env or ~/.openclaw/workspace/.env), but the skill metadata does not declare it — supply the key via environment variables rather than leaving a plaintext .env in your home if possible. - Inspect SKILL.md and scripts for hard-coded paths. There is an example that opens '/Users/kk/.openclaw/workspace/.env' — likely leftover from the author; ensure no unwanted absolute paths are present or being used on your system. - Be aware the skill will download video files to disk and invoke ffmpeg and Whisper (CPU/GPU). Ensure you have the disk, compute capacity, and have installed the required tooling yourself (ffmpeg, whisper packages). requirements.txt lists ffmpeg (not a pip package) and multiple whisper packages — pick the ones you trust and need. - The skill relies on an external MCP (mcporter) server configuration referenced in ~/.openclaw/workspace/config/mcporter.json. If you don't run or trust that server, avoid executing MCP commands; the fallback Python SDK uses the TikHub API directly. - Network destinations: the skill talks to api.tikhub.dev and to the video host URLs it fetches — expected for this functionality. Confirm you are comfortable with calls to those endpoints and potential billing/usage (SKILL.md warns about a small balance and that some endpoints are paid). - Legal/ToS: scraping/downloading platform content may violate service terms or copyrights. Ensure you have the right to download/transcribe the content you target. If you want higher confidence, ask the author to: (1) update registry metadata to declare TIKHUB_API_KEY as a required env var, (2) remove or parameterize hard-coded user paths, and (3) provide clarity about MCP dependency and whether mcporter servers are remote/shared.

Like a lobster shell, security has layers — review code before you run it.

latestvk976y12tdts0fh6w2mar0252s583t9pw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments