Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Douyin Hot Trend 1

抖音热榜获取技能 | Douyin Hot List Fetcher 获取抖音热榜/热搜榜数据 | Get Douyin hot list/trending data 包含热门视频、挑战赛、音乐等多领域热门内容 | Includes popular videos, challenges, music and mo...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 26 · 1 current installs · 1 all-time installs
bynoah@noah-1106
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The included scripts (Node.js fetchers and Python DB/reporting tools) clearly implement the stated purpose (fetch Douyin hot/trending data, save to a local SQLite DB, generate an HTML report). That behavior is coherent with the skill description. However, the registry metadata reported at the top claims 'Required binaries: none' and 'instruction-only', while package.json declares an OpenClaw requirement for the 'node' binary and the bundle contains multiple runnable scripts — this mismatch is inconsistent and worth attention.
Instruction Scope
The SKILL.md instructs running the Node fetch script (node scripts/douyin.js). The runtime instructions and code operate on the Douyin web endpoint (www.douyin.com) and on a local SQLite DB (data/douyin.db). There are no instructions to read unrelated system files, environment secrets, or to transmit data to third-party endpoints other than Douyin. The save_to_db flow calls a local Node script via subprocess and writes results to data/, which is expected behavior for this skill.
Install Mechanism
There is no install spec (instruction-only) in the registry, so nothing would be auto-downloaded at install time. However, the package includes code (Node and Python scripts) and package.json indicates Node is required. Because the bundle contains executable scripts, you will need Node and Python on the host to run them. The lack of an install step is not dangerous by itself, but the metadata mismatch (no declared binaries in registry vs. package.json) is inconsistent and may confuse automated installers.
Credentials
The skill does not request environment variables, keys, or other credentials. None of the scripts read secrets or external config. This is proportionate for a web-scraping/trending-data tool. The only external access is to Douyin's public web endpoint, which matches the stated purpose.
Persistence & Privilege
The skill is not marked always:true and does not attempt to modify other skills or system-wide agent settings. It writes a local SQLite DB under data/douyin.db and a generated HTML report under data/index.html — expected for a local collector. Autonomous invocation remains enabled (platform default) but that is not combined with other privilege concerns here.
What to consider before installing
What to check before installing: - Verify runtime requirements: package.json indicates Node is required and the repo contains Python scripts; ensure you have Node and Python available. The registry metadata claiming 'no required binaries' is inconsistent — expect to need node. - The code will create and write to data/douyin.db and data/index.html in the skill folder. If you care about disk location or permissions, inspect those files and run in a directory you control or a sandbox. - The scripts perform HTTP requests to https://www.douyin.com only. If you are comfortable with that external network access, the behavior matches the description. If you need stricter network controls, run the skill in an isolated environment. - Source provenance: the SKILL.md credits a GitHub repo but the skill has no homepage and owner ID is unfamiliar. Consider reviewing the original upstream repo (linked in SKILL.md) and verifying any modifications. - Operational caution: frequent automated requests to public web endpoints may trigger rate-limiting or TOS issues; respect scraping rules and add rate-limiting if you run scheduled jobs. - If you need stronger assurance, ask the author to fix metadata (declare 'node' as a required binary and clarify install/run steps) or provide a reproducible build/installation guide. Running the code in a sandbox first is recommended.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.3
Download zip
latestvk97bngrrmhp5acacjrbqkp7zv9831dns

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🎵 Clawdis

SKILL.md

抖音热榜获取技能 | Douyin Hot List Fetcher

获取抖音热榜/热搜榜数据,包含热门视频、挑战赛、音乐等多领域热门内容,并输出标题、热度值与跳转链接。 Fetch Douyin hot list/trending data, including popular videos, challenges, music and more, outputting titles, heat values and links.


功能特性 | Features

  • 🔥 实时热榜 / Real-time Hot List - 获取抖音最新热门内容 | Get Douyin's latest trending content
  • 📊 热度值 / Heat Values - 显示每个话题的热度评分 | Show heat scores for each topic
  • 🔗 跳转链接 / Jump Links - 提供详情页直达链接 | Provide direct links to detail pages
  • 🎯 自定义数量 / Custom Count - 可指定获取前 N 条数据 | Specify number of items to fetch
  • 📱 多领域内容 / Multi-domain Content - 热门视频、挑战赛、音乐等 | Videos, challenges, music and more

快速开始 | Quick Start

# 获取抖音热榜前 50 条(默认)/ Get Douyin hot list top 50 (default)
node scripts/douyin.js hot

# 获取前 20 条 / Get top 20
node scripts/douyin.js hot 20

# 获取前 10 条 / Get top 10
node scripts/douyin.js hot 10

输出格式 | Output Format

每条热榜包含 / Each hot list item includes:

  • 📌 排名 / Rank - 热榜排名 | Hot list ranking
  • 🔥 标题 / Title - 热门话题/视频标题 | Hot topic/video title
  • 📊 热度值 / Heat - 热度评分 | Heat score
  • 🔗 链接 / Link - 详情页跳转链接 | Detail page link

使用示例 | Usage Example

# 获取热门前 20 / Get top 20 hot items
node scripts/douyin.js hot 20

# 输出示例 / Output example:
# 1. 🔥 xxx话题 / xxx topic
#    热度 / Heat: 1234567
#    链接 / Link: https://www.douyin.com/...

数据来源 | Data Source

抖音网页端公开接口 | Douyin web public interface


注意事项 | Notes

  • ⚠️ 该接口为网页端公开接口,返回结构可能变动 This interface is a public web interface; structure may change
  • ⚠️ 访问频繁可能触发风控 Frequent access may trigger rate limiting
  • ⚠️ 建议合理使用,避免频繁请求 Recommend reasonable use, avoid frequent requests

使用场景 | Use Cases

  • 📰 热点追踪 / Hot topic tracking
  • 📊 内容趋势分析 / Content trend analysis
  • 🎯 营销策划参考 / Marketing planning reference
  • 📱 社交媒体运营 / Social media operations

Credits / 致谢

基于 douyin-hot-trend 修改
感谢原作者 @franklu0819-lang


License / 许可证

MIT

Files

11 total
Select a file
Select a file to preview.

Comments

Loading comments…