Security audit
Security checks across malware telemetry and agentic risk
This transcription skill is mostly coherent, but it needs review because it explicitly automates Douyin login-wall bypass and overstates privacy while making network requests and downloads.
Install only if you are comfortable with a skill that installs a local Python environment, Chromium, and Whisper dependencies, contacts Douyin for shared links, downloads videos, and saves/prints full transcripts. Use it only on content you are authorized to access, and avoid confidential media unless you are comfortable with transcript files and tool logs containing the full spoken content.
if not python:
return -1, "", "venv Python not found"
try:
r = subprocess.run(
[python, "-c", script],
capture_output=True, text=True, timeout=timeout
)61/61 vendors flagged this skill as clean.
No suspicious patterns detected.