Douyin Messager | 抖音私信助手
v1.1.5Send Douyin DMs, reply, and check chat history through browser automation. 自动发送抖音私信、回复消息、查看聊天记录。
⭐ 9· 2.1k·10 current·11 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (send Douyin DMs) match the runtime instructions: opening douyin.com, locating the DM panel, pasting into the Draft.js editor, sending, scrolling, and taking screenshots. No environment variables, external services, or installs are requested that would be unrelated to browser automation.
Instruction Scope
Instructions perform DOM-wide searches (document.querySelectorAll('*')), evaluate arbitrary JS in the page, use navigator.clipboard.writeText + document.execCommand('paste'), dispatch synthetic keyboard events, and take screenshots. These are appropriate for browser automation, but they do (a) overwrite the clipboard and (b) can read/inspect any content visible on the opened page. Ensure the agent is constrained to douyin.com and that you accept clipboard overwrite and browser automation permissions.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install mechanism. Nothing is downloaded or written to disk.
Credentials
No environment variables, credentials, or config paths are requested. The skill asks the user to be logged into Douyin (reasonable and expected) and does not declare or require unrelated secrets.
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes. It does execute actions in the browser at runtime but does not modify other skills or system configs.
Assessment
This skill appears to do what it says (automate Douyin DMs) and does not ask for extra credentials or installs. Before using: (1) test with a throwaway Douyin account to confirm behavior and avoid accidental messages; (2) be aware it will overwrite your clipboard when pasting messages; (3) the skill runs arbitrary JS in the pages it opens—make sure the agent is limited to https://www.douyin.com/ so it doesn’t read other sites you may have open; (4) browser paste actions may require user permission or gestures in some browsers; (5) if you are uncomfortable with automated access to your logged-in browser session, do not install. If you want greater safety, run this only in an isolated browser/profile or with an account that has no sensitive contacts.Like a lobster shell, security has layers — review code before you run it.
latestvk976pefqwxzgddee61xtt6y28184az7b
License
MIT-0
Free to use, modify, and redistribute. No attribution required.