抖音账号视频批量下载器

• Outcome: Pass
• Latest audit: Jul 29, 2026 · 11:07 AM UTC
• Version: 0.1.0

Overview

The skill is a disclosed Douyin downloader that uses RedFox APIs and can save media locally, with no evidence of hidden or destructive behavior.

Install only if you are comfortable sending Douyin IDs, work URLs, and your RedFox API key to redfox.hk, and only download media you are allowed to store or reuse. Confirm the output directory before batch downloads, especially for multiple accounts, because it can create many local media files.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (10)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 95% confidence
• Finding: The skill invokes environment variables, filesystem reads/writes, and outbound network access, but declares no permissions or user-visible capability boundaries. That makes the execution model opaque to the host agent and user, increasing the risk of unintended secret exposure, third-party data transmission, and local file modification during invocation.

Vague Triggers

Medium

• Confidence: 85% confidence
• Finding: The skill invites users to issue broad natural-language requests such as downloading videos from arbitrary accounts, with minimal trigger constraints or approval boundaries. In this context, that increases the chance of overbroad collection and mass downloading of third-party content, especially because the skill explicitly emphasizes batch extraction of watermark-free media for competitor analysis and reuse.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The README states that the skill will batch download videos to the local device but does not warn about disk usage, destination paths, overwrite behavior, or the volume of files that may be written. Because this skill is designed for bulk media retrieval, an uninformed user could trigger large local writes that consume storage, create unexpected files, or overwrite existing content if safeguards are weak.

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The README explicitly promotes bulk downloading Douyin content, including watermark-free links and local batch saving, but does not provide meaningful warnings about copyright, authorization, platform Terms of Service, privacy, or the local disk-write side effects of mass download. In this context, the omission is security-relevant because the skill is designed to facilitate large-scale extraction and storage of third-party media, which increases the risk of misuse, unauthorized retention, and unintended writes to the user's machine.

Vague Triggers

Medium

• Confidence: 86% confidence
• Finding: The trigger phrases include broad, natural-language requests such as '帮我下载 xxx 的抖音视频', which can cause the skill to activate in contexts where the user did not intend bulk scraping or local downloading. Because this skill performs third-party API calls and can write multiple files locally, accidental invocation has meaningful privacy and system-side effects.

Missing User Warnings

High

• Confidence: 97% confidence
• Finding: The skill describes use of redfox.hk APIs but does not present a prominent user-facing warning that entered Douyin account identifiers, content metadata, and requested links are transmitted to a third-party service. In this context, the tool is designed for bulk collection of another account's content, so lack of disclosure materially increases privacy, compliance, and trust risks.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill advertises one-click bulk download to a local output directory but does not clearly warn users that it may create and populate many files on the local filesystem. In an agent setting, this can surprise users, consume disk space, overwrite expected locations, or cause unintended persistence of downloaded media.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The script sends Douyin account identifiers and derived work metadata/URLs to a third-party service (redfox.hk) to enumerate works and resolve download links, but it does not present a clear consent notice or data-disclosure warning before transmission. This creates a privacy and trust risk because users may believe processing is local when account targets, activity metadata, and queried content are actually disclosed to an external provider.

External Transmission

Medium

• Category: Data Exfiltration

Content

}

        try:
            resp = requests.post(url, json=payload, headers=headers, timeout=30)
            result = resp.json()
        except requests.exceptions.Timeout:
            _record_failure(account_id)

• Confidence: 95% confidence
• Finding: requests.post(url, json=

External Transmission

Medium

• Category: Data Exfiltration

Content

}

        try:
            resp = requests.post(url, json=payload, headers=headers, timeout=30)
            data = resp.json()
        except requests.exceptions.Timeout:
            return {"success": False, "download_url": None, "title": None, "cover": None,

• Confidence: 95% confidence
• Finding: requests.post(url, json=

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.