Douyin Video Downloader (抖音视频下载器)

This skill appears to do what it claims, but review these practical points before installing: - The script reads your TikHub API token from ~/.openclaw/config.json (plain JSON). Only put a token there if you trust the local environment and the TikHub service. Any local process that can read that file can use the token. - The skill makes outbound requests to api.tikhub.io and to the video URL host (douyin). If you have network/privacy concerns, be aware that a third-party service (TikHub) will see the requested video IDs and trigger the subsequent fetches. - Downloads are saved to ~/Downloads/douyin by default. Ensure you are comfortable with files being written there and with the copyright/legal implications of saving videos. - Metadata omitted a required config path: the registry showed no config paths but the SKILL.md/script require ~/.openclaw/config.json. This is an informational inconsistency — not necessarily malicious, but worth noting. - If you are concerned about automatic invocation, disable autonomous skill invocation or instruct the agent not to auto-run this skill when it merely detects a link. If you want stronger safety: inspect the script yourself (it is included), store the token in a more restricted location and update the code if desired, or run the script manually rather than allowing autonomous invocation.