无水印抖音视频下载器

• Outcome: Review
• Latest audit: Aug 6, 2026 · 4:03 AM UTC
• Version: 1.0.9

Overview

This downloader does what it claims at a basic level, but it silently sends the user's Douyin link to an unrelated third-party parsing service.

Install only if you are comfortable with each Douyin link you provide being sent to lvhomeproxy2.dpdns.org and with the script downloading whatever video URL that service returns. Prefer a version that clearly documents its network services, restricts accepted domains, and validates returned download URLs.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (5)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 82% confidence
• Finding: The skill documentation advertises downloading videos and the associated implementation reportedly uses network access, but the skill declares no permissions. Missing permission disclosure is a real security issue because users and platform controls cannot accurately assess or constrain outbound connectivity, especially for a downloader that processes user-supplied URLs. In this context, undeclared network access is more concerning because the skill handles external links and may contact remote services during resolution or download.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: This is a true vulnerability because the documented behavior does not disclose that user-provided Douyin URLs are sent to an external third-party parsing service, nor that additional domains such as bilibili.com and iesdouyin.com are accepted. That mismatch can expose user inputs to an untrusted intermediary, expand data flow beyond user expectations, and create SSRF-like or trust-boundary issues if domain handling is broader than described. The skill context makes this more dangerous because users expect a local downloader, not silent forwarding of links to a third-party host.

Description-Behavior Mismatch

Medium

• Confidence: 96% confidence
• Finding: The script sends the user-supplied Douyin share URL to an unrelated third-party host (lvhomeproxy2.dpdns.org) for parsing instead of interacting directly with Douyin-owned infrastructure. This leaks user activity and relies on an untrusted service that can log requests, return manipulated download URLs, or serve malicious content, which is especially concerning for a downloader skill that users may assume only contacts Douyin.

Context-Inappropriate Capability

Medium

• Confidence: 83% confidence
• Finding: The allowlist permits bilibili.com even though the skill is described as a Douyin-only downloader, creating unnecessary attack surface and policy ambiguity. While the current extract_url function only matches v.douyin.com links, the broader domain allowlist suggests unjustified support and could enable accidental or future misuse if other code paths are added.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The code transmits the user's share URL to a third-party API without any user-facing notice or consent, despite this request exposing which content the user is trying to access. In this context, the lack of transparency increases privacy risk and may mislead users into believing the tool operates locally or only with Douyin services.

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

No suspicious patterns detected.