抖音自动回复助手

抖音自动回复助手 - 自动回复抖音评论、发送引荐码、引导私信。使用 DouyinBot API 实现评论监控、智能回复和私信引流。适用于抖音创作者、电商卖家、知识付费从业者。

Security Scan

The skill appears to be what it claims (a Douyin/TikTok auto-reply tool) and its files/documents are consistent, but core network calls are left as TODOs and you should treat your Douyin session cookie as highly sensitive before running it.

Purpose & Capability

Name, description, docs and included scripts align with an automated Douyin comment-reply/pm tool. However, the main script (scripts/douyin_bot.py) currently contains TODO placeholders for get_comments, reply_comment and send_private_message (no real network calls implemented). references/api_docs.md shows expected API endpoints and example requests, so the package documents the intended capabilities, but the shipped code is incomplete — it will not actually call Douyin until those TODOs are implemented.

Instruction Scope

SKILL.md and QUICKSTART instruct the user to copy a browser session cookie into config.json or via the config_manager tool. That is expected for cookie-based automation, but asking users to extract and paste session cookies is sensitive: the cookie grants account access and must be kept secret. The runtime instructions and scripts operate on local files (config.json, stats.json, douyin_bot.log) and do not reference other system credentials or external endpoints beyond the documented Douyin API.

Install Mechanism

No install spec; this is an instruction-and-script package that runs locally. requirements.txt lists only requests, which matches the documented API usage. Nothing is downloaded from external/personal URLs or written to system locations during install.

Credentials

The skill requires no environment variables or external credentials in metadata; it uses a douyin_cookie stored in a local config file, which is proportionate to the stated purpose. The number and type of required secrets (just a session cookie) are appropriate for a cookie-authenticated client. Note: session cookies are sensitive and can be abused if exposed.

Persistence & Privilege

The skill does not request persistent elevated privileges, does not set always:true, and does not modify other skills or system-wide agent settings. It is user-invocable and can be run locally on demand.

Assessment

This package is internally coherent for a Douyin auto-reply tool, but review and consider the following before installing or running: - Sensitive credential: the tool requires your Douyin session cookie (copied from your browser). Treat it like a password — do not share it, do not upload config.json to untrusted hosts, and store backups securely. - Incomplete implementation: the main script has TODOs for the actual API calls (get_comments, reply_comment, send_private_message). By default it will not perform network operations until those functions are implemented. Verify any added network code before running. - Run locally and inspect code: run in a controlled environment, read/understand the code that will call Douyin APIs, and confirm there are no hidden network endpoints or telemetry you don't expect. - Account risk: automated replies can trigger platform enforcement. Use conservative rate limits/delays and prefer testing on a secondary account first. - Dependencies: the package expects Python and the requests library; install only from trusted sources (pip install requests). If you want higher assurance, ask the developer for a version where the API calls are implemented and peer-reviewed, or request a signed/source-controlled release (e.g., GitHub repo) so you can verify changes over time.

自动化抖音评论管理和私信引流工具。

功能

1. 自动回复评论 - 监控新评论并自动回复
2. 发送引荐码 - 根据关键词自动发送引荐码/优惠码
3. 引导私信 - 智能引导用户私信转化

快速开始

配置

在 config.json 中设置你的抖音账号和 API 信息：

{
  "douyin_cookie": "your_session_cookie",
  "keywords": {
    "怎么买": "添加微信：xxx 领取优惠",
    "价格": "私信我获取专属优惠",
    "链接": "已私信发送链接"
  },
  "reply_delay": 30,
  "daily_limit": 100
}

启动

python scripts/douyin_bot.py start

查看状态

python scripts/douyin_bot.py status

使用场景

• 电商卖家自动回复商品咨询
• 知识付费自动发送课程信息
• 创作者自动引导粉丝私信
• 品牌方自动发送优惠活动

脚本说明

核心脚本

• scripts/douyin_bot.py - 主程序，负责评论监控和自动回复
• scripts/config_manager.py - 配置管理工具
• scripts/analytics.py - 数据统计和分析

配置文件

• config.json - 主配置文件
• keywords.json - 关键词回复规则（可选独立配置）

注意事项

1. 遵守抖音平台规则，避免频繁操作导致封号
2. 设置合理的回复延迟（建议 30-60 秒）
3. 设置每日回复上限（建议 100-200 条）
4. 定期更新抖音 cookie 避免失效

API 参考

详见 references/api_docs.md - 抖音开放平台 API 文档和调用示例

故障排查

详见 references/troubleshooting.md - 常见问题和解决方案