Douyin
v0.1.0抖音视频上传工具。支持登录抖音账号、上传视频、管理登录状态。当用户需要上传视频到抖音、登录抖音、检查抖音登录状态时使用。
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Douyin video upload, login, session management) match the included files and declared requirements. Requiring node/npm and a Chrome-like browser is consistent with puppeteer-based browser automation. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs only to install npm deps and run the included login/upload/manage scripts. The scripts only open Douyin creator domains, save/read local cookies, manage a local browser profile, and upload files specified by the user. There are no instructions to read unrelated system files, environment secrets, or to send data to third-party endpoints.
Install Mechanism
Install uses npm to install the puppeteer package (declared in package.json). This is an expected, traceable registry dependency for a Node/puppeteer tool. Note: puppeteer typically downloads/uses a Chromium binary during installation/run, which is expected for this kind of tool.
Credentials
The skill declares no required environment variables or credentials. It stores cookies and browser profile under its own directory (douyin-cookies.json and chrome-user-data), which is proportionate for a login/upload tool. No unrelated secrets or service tokens are requested.
Persistence & Privilege
The skill is not marked always:true and does not request any elevated or cross-skill privileges. It persists only its own cookie file and user-data directory under the skill's directory, which is normal for this functionality.
Assessment
This skill appears to do what it says: automate logging into Douyin and uploading videos via a local headless/full Chrome instance using puppeteer. Before installing, consider: (1) npm install will download puppeteer and likely a Chromium binary — ensure you trust that operation and have sufficient disk/network. (2) Cookies and browser profile are stored locally as douyin-cookies.json and chrome-user-data/ in the skill directory — treat that directory as sensitive (anyone with access could reuse the cookies). (3) The tool requires you to provide video file paths and may prompt for SMS codes during verification; avoid running it on untrusted/shared machines. If you need tighter isolation, run it in a contained environment (dedicated VM or container) and inspect the cookie file if desired.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
🎬 Clawdis
OSmacOS · Linux · Windows
Binsnode, npm
Any binchromium, google-chrome, chrome
Install
Node
npm i -g puppeteerlatest
抖音视频上传工具
自动化上传视频到抖音创作者平台,支持登录、上传和账号管理。
此 skill 为自包含结构,所有代码已打包在内,无需克隆外部仓库。
透明度声明
数据存储
- Cookie 文件:
{baseDir}/douyin-cookies.json- 存储抖音登录凭证,仅在本地保存 - 浏览器数据:
{baseDir}/chrome-user-data/- Puppeteer 浏览器会话数据
网络访问
本工具仅访问以下抖音官方域名:
https://creator.douyin.com- 抖音创作者平台(登录、上传)https://www.douyin.com- 抖音主站(权限验证)
不会访问任何第三方服务器,不会上传或泄露您的登录凭证。
代码行为
- login.js: 打开浏览器 → 导航到抖音登录页 → 等待用户手动登录 → 保存 Cookie 到本地文件
- upload.js: 读取本地 Cookie → 自动登录 → 上传指定视频文件 → 填写标题/描述/标签 → 发布
- manage.js: 读取/验证/删除本地 Cookie 文件
依赖
- puppeteer: 浏览器自动化(Chromium)
- 完整依赖: 见本目录
package.json
安装
首次使用需要安装依赖:
cd {baseDir} && npm install
说明: 仅安装 puppeteer 依赖,无需克隆外部仓库。
功能一:登录抖音
登录抖音创作者平台,保存登录凭证(Cookie)。
cd {baseDir} && node scripts/login.js
流程:
- 自动打开浏览器窗口
- 等待用户完成登录(扫码或账号密码)
- 登录成功后自动保存 Cookie
输出示例:
✅ Login successful!
User: 用户昵称
Cookies saved: 25
功能二:上传视频
上传视频到抖音,支持设置标题、描述和标签。
cd {baseDir} && node scripts/upload.js --video "视频路径" --title "视频标题"
参数:
| 参数 | 必需 | 说明 |
|---|---|---|
--video | 是 | 视频文件绝对路径 |
--title | 是 | 视频标题 |
--description | 否 | 视频描述 |
--tags | 否 | 标签,逗号分隔 |
--no-publish | 否 | 仅保存草稿 |
完整示例:
cd {baseDir} && node scripts/upload.js \
--video "/Users/xxx/video.mp4" \
--title "我的视频" \
--description "视频描述" \
--tags "日常,生活,记录"
输出示例:
✅ Video upload and publish successful!
Title: 我的视频
Status: Published
功能三:管理登录状态
检查、查看或清除登录数据。
检查登录是否有效
cd {baseDir} && node scripts/manage.js check
查看 Cookie 信息
cd {baseDir} && node scripts/manage.js info
清除登录数据
cd {baseDir} && node scripts/manage.js clear
常见问题
Q: 提示 "Login expired"?
cd {baseDir} && node scripts/manage.js clear
cd {baseDir} && node scripts/login.js
Q: 上传时遇到短信验证? 程序会自动提示,按提示输入验证码即可。
Q: Cookie 有效期多久? 约 30 天,建议定期检查登录状态。
Comments
Loading comments...
