Douyin
v0.1.0抖音视频上传工具。支持登录抖音账号、上传视频、管理登录状态。当用户需要上传视频到抖音、登录抖音、检查抖音登录状态时使用。
⭐ 0· 219·0 current·0 all-time
bylance@lancelin111
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Douyin video upload, login, session management) match the included files and declared requirements. Requiring node/npm and a Chrome-like browser is consistent with puppeteer-based browser automation. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs only to install npm deps and run the included login/upload/manage scripts. The scripts only open Douyin creator domains, save/read local cookies, manage a local browser profile, and upload files specified by the user. There are no instructions to read unrelated system files, environment secrets, or to send data to third-party endpoints.
Install Mechanism
Install uses npm to install the puppeteer package (declared in package.json). This is an expected, traceable registry dependency for a Node/puppeteer tool. Note: puppeteer typically downloads/uses a Chromium binary during installation/run, which is expected for this kind of tool.
Credentials
The skill declares no required environment variables or credentials. It stores cookies and browser profile under its own directory (douyin-cookies.json and chrome-user-data), which is proportionate for a login/upload tool. No unrelated secrets or service tokens are requested.
Persistence & Privilege
The skill is not marked always:true and does not request any elevated or cross-skill privileges. It persists only its own cookie file and user-data directory under the skill's directory, which is normal for this functionality.
Assessment
This skill appears to do what it says: automate logging into Douyin and uploading videos via a local headless/full Chrome instance using puppeteer. Before installing, consider: (1) npm install will download puppeteer and likely a Chromium binary — ensure you trust that operation and have sufficient disk/network. (2) Cookies and browser profile are stored locally as douyin-cookies.json and chrome-user-data/ in the skill directory — treat that directory as sensitive (anyone with access could reuse the cookies). (3) The tool requires you to provide video file paths and may prompt for SMS codes during verification; avoid running it on untrusted/shared machines. If you need tighter isolation, run it in a contained environment (dedicated VM or container) and inspect the cookie file if desired.Like a lobster shell, security has layers — review code before you run it.
latestvk975y04258g0t9wwn8xawnbwk1832qvd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
OSmacOS · Linux · Windows
Binsnode, npm
Any binchromium, google-chrome, chrome
Install
Node
npm i -g puppeteer