Douyin Comment Bot

WarnAudited by ClawScan on May 10, 2026.

Overview

This skill is designed to use a logged-in Douyin account to post public comments and includes automatic local gateway restart commands, so it needs careful review before use.

Install only if you are comfortable letting the agent use your logged-in Douyin session to post public comments. Review and approve every target video, comment text, and count before submission, and avoid allowing the skill to restart local OpenClaw gateway processes automatically.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could post public comments from the user's Douyin account, including potentially unwanted, mistaken, or repeated comments.

Why it was flagged

The skill instructs the agent to automate the full flow through submitting a public Douyin comment, but does not require a final user confirmation before pressing Enter.

Skill content
搜索关键词 → 选热门视频 → 发布评论 ... browser act kind=press ref=评论框ref key=Enter profile=openclaw
Recommendation

Require explicit user approval of the target video, exact comment text, and number of comments before submitting; add clear rate limits and a stop condition.

What this means

Any comment action is performed as the logged-in user and may affect their account reputation, platform standing, or social presence.

Why it was flagged

The skill depends on an already logged-in browser profile, meaning it acts with the user's Douyin account privileges rather than a narrowly scoped credential.

Skill content
浏览器 profile `openclaw` 已启动且已登录抖音账号
Recommendation

Use a dedicated browser profile or account if possible, disclose the authenticated-session requirement in metadata, and require per-action confirmation for public posting.

What this means

This could interrupt other OpenClaw/browser activity or change the local agent environment during a Douyin commenting task.

Why it was flagged

The skill tells the agent to run local shell commands automatically and kill matching gateway processes without asking the user.

Skill content
如果 browser 工具返回 `timed out` 错误,**自动重启 Gateway**(无需询问用户):
pkill -f "node.*openclaw.*gateway" || true
Recommendation

Do not automatically restart or kill gateway processes; ask the user first and make the command scope as narrow and reversible as possible.