Back to skill
Skillv1.0.0
VirusTotal security
douyindownloadwhisper · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 25, 2026, 2:51 AM
- Hash
- ba9cd1afa0dc1f456ca7c5349cea6f986a61244694b7f07f53842456a9d5d3ea
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: douyindownloadwhisper Version: 1.0.0 The skill is a legitimate tool for downloading Douyin videos and generating transcripts. The core logic in `douyin.js` uses Node.js to parse video metadata, download content, and interface with local tools like `ffmpeg` and `whisper`, as well as the MiniMax API for text processing. Security analysis shows no evidence of data exfiltration, command injection, or malicious intent; external processes are invoked safely using `spawn` with sanitized arguments, and environment variable usage is limited to necessary API keys.
- External report
- View on VirusTotal