Douyin-skill
v0.7.0Douyin (TikTok China) video uploader & automation tool. Upload videos, manage login sessions, and automate publishing to Douyin Creator Platform. 抖音视频上传工具 |...
⭐ 0· 285·2 current·2 all-time
bylance@lancelin111
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Douyin uploader) match the included code, scripts, and declared dependencies. Required binaries (node, npm, Chromium/Chrome) and the single npm dependency (puppeteer) are expected for a browser-automation uploader.
Instruction Scope
SKILL.md instructs running bundled node scripts for login, upload, and management. The scripts use Puppeteer to open Douyin domains, read/write a local cookie file, and store browser user data — all within the stated purpose. The instructions do not request unrelated system files, extra environment variables, or third-party endpoints.
Install Mechanism
Install uses npm to install puppeteer (package.json lists puppeteer ^23.11.1). This is an expected and traceable dependency for browser automation, but npm installs will download packages (and Puppeteer may download a Chromium build) — a moderate supply-chain/install footprint inherent to Puppeteer.
Credentials
No environment variables or external credentials are requested. The skill persists cookies and browser profile data locally (cookies at ./douyin-cookies.json with chmod 0600 and user-data in ./chrome-user-data/) which is proportional to the stated login/session management functionality.
Persistence & Privilege
The skill is not forced-always or privileged. It writes local session files (cookie JSON and browser user-data) into its directory — expected for session persistence but worth noting for users who prefer storing credentials elsewhere or using ephemeral accounts.
Assessment
This package appears to do what it says: automate Douyin login and upload via Puppeteer. Before installing, consider: 1) npm install will fetch dependencies (Puppeteer may download Chromium) — run in an environment with sufficient disk space. 2) The tool stores cookies and browser data locally (douyin-cookies.json and chrome-user-data/) — protect or delete these files if you share the machine. 3) Use an account you control (or a test account) when trying automation that stores credentials. 4) Review the GitHub homepage/source yourself if you want higher assurance and keep dependencies up to date to reduce supply-chain risk. 5) The first upload requires SMS verification as noted — you'll need to enter that code interactively. If you need stronger isolation, run the tool inside a VM or container.Like a lobster shell, security has layers — review code before you run it.
latestvk974bmv3gp0dqgarvev6x5g449833640
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
OSmacOS · Linux · Windows
Binsnode, npm
Any binchromium, google-chrome, chrome
Install
Node
npm i -g puppeteer