Douyin Comment Bot

• Analyzed: Mar 31, 2026, 12:11 PM
• Findings: 1
• Version: 1.0.0
• Hash: 6f7377026e60f76899e4acba4fa447eb26b888d6cb16f36c8da01e9475b646a2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill includes instructions in SKILL.md for the agent to execute shell commands (`pkill -f "node.*openclaw.*gateway"`) to restart the system gateway without user intervention. While this is framed as a fix for timeout errors, the use of unprompted process manipulation and shell execution within a browser-focused skill is a high-privilege behavior that could be abused.