Douyin Auto Publish 抖音自动上传发布
v1.1.0抖音创作者平台视频上传发布。触发条件：用户要求上传视频到抖音、发布抖音视频、自动上传视频到抖音创作者平台
⭐ 2· 282·0 current·0 all-time
by@l1angjy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (automatic upload to Douyin creator platform) match the instructions: the SKILL.md uses the OpenClaw Browser tool to navigate creator.douyin.com, find page elements, upload a file, fill title, and click publish. No unrelated services, binaries, or credentials are requested.
Instruction Scope
Instructions require controlling the host Chrome session via target="host" to inherit login state and instruct the agent to read/upload files from /tmp/openclaw/uploads. This is expected for an uploader but carries the implicit capability to perform actions as the logged-in user (e.g., publish content). The skill does not instruct reading other host files or environment variables.
Install Mechanism
Instruction-only skill with no install spec and no code files. No downloads or installs are performed by the skill itself, minimizing disk-write risk.
Credentials
The skill does not request environment variables, credentials, or config paths. The only host access it needs (and documents) is to read files placed into /tmp/openclaw/uploads and to control the user's Chrome session; both are proportional to the stated task.
Persistence & Privilege
always:false (normal). The main privilege of concern is runtime access to the user's Chrome session (target="host"), which is necessary for inheriting login but also gives the agent the ability to act as the logged-in user. The skill does not request permanent presence or modify other skills.
Assessment
This skill appears to do what it says, but it will control your local Chrome browser and act using your logged-in Douyin account if you use target="host". Before installing or using it: 1) Prefer testing with a throwaway/creator account so inadvertent posts won't affect your main account; 2) Be aware the agent can publish as you while Chrome is logged in—use target="sandbox" if you want isolation (note: sandbox requires separate login); 3) Only place files you intend to upload into /tmp/openclaw/uploads and verify the file names; 4) Monitor the first runs manually to confirm the sequence of actions; 5) Avoid giving this skill additional credentials or admin-level access, which it does not request. If you want higher assurance, request the author to provide a signed source/homepage or an install package from a known registry.Like a lobster shell, security has layers — review code before you run it.
latestvk97674zc62fqap9mdzfa1j8gsd84hh5g
License
MIT-0
Free to use, modify, and redistribute. No attribution required.