Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Douyin Automation V2

v1.0.0

抖音自动化运营技能包:自动评论回复、私信发送、点赞、搜索指定话题。适用于抖音账号运营、评论区互动管理。遵守平台规则,不自我介绍,纯正常互动。

1· 147·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for linbo405/douyin-automation-v2.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Douyin Automation V2" (linbo405/douyin-automation-v2) from ClawHub.
Skill page: https://clawhub.ai/linbo405/douyin-automation-v2
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install douyin-automation-v2

ClawHub CLI

Package manager switcher

npx clawhub@latest install douyin-automation-v2
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (Douyin automation: comments, DMs, likes, search) align with included files and SKILL.md browser workflows. The Python helper (auto_replier.py) and workflow docs support the described features. However, the code and README assume an absolute D:/.openclaw workspace path (Windows drive letter) while the skill declares support for win32, darwin, and linux — this is inconsistent and may cause failures or unexpected writes on non‑Windows systems.
Instruction Scope
SKILL.md instructs only browser navigation, snapshots, and element actions (browser.navigate/snapshot/act) — scope is limited to UI automation. The included Python code generates reply text and maintains a local reply history file. The SKILL.md does not instruct reading arbitrary system files or contacting external endpoints, but it does not document the exact filesystem location the code will use (the code hardcodes D:/.openclaw/workspace/data). Persisting reply history is within the skill's domain but is not fully documented in SKILL.md.
Install Mechanism
No install spec (instruction-only plus local Python files). No network downloads or package installs. Low installation risk.
!
Credentials
The skill requests no environment variables or credentials, which is appropriate. However, auto_replier.py writes/reads a hardcoded absolute path (D:/.openclaw/workspace/data/douyin_replier_log.json) rather than using a relative path or configurable env var. That is disproportionate/unexpected given cross‑platform claims and could cause accidental writes to an unexpected location or failure on non‑Windows hosts. There are no hidden credential requests.
Persistence & Privilege
The skill does persist state to disk (reply history file) within what it claims is an OpenClaw workspace. It does not request always:true, nor modify other skills' configs. Autonomous invocation (model-invocation enabled) is the platform default; combined with the ability to control a browser and send messages, this increases operational risk if misused, but is not by itself a misconfiguration in the skill.
What to consider before installing
This skill appears to implement the advertised Douyin interactions and reply generation, but review these before installing: - Path and cross-platform: The Python code uses a hardcoded absolute path (D:/.openclaw/workspace/data). If you run on macOS/Linux or a Windows host without a D: drive, the skill may fail or create files in an unexpected location. Prefer changing the code to use a relative path inside the skill directory or an environment variable for the data directory before use. - Persistence: The skill writes a reply history JSON file. If you are concerned about local storage or sensitive data, inspect/relocate or sandbox the workspace directory. - Autonomy and rate limits: The skill can be invoked autonomously and performs browser-driven actions (comments, likes, DMs). Make sure you understand and accept the risk of automated interactions with Douyin (rate limits, account sanctions). Test with a throwaway account and enable random delays as recommended. - Compliance: Ensure use complies with Douyin/TikTok terms and laws in your jurisdiction. Avoid bulk unsolicited messaging. - Code review: The Python files contain no network calls or obfuscated code; nevertheless, if you plan to run this in production, consider patching the hardcoded path, adding input validation, and logging controls. If you want to proceed, patch the data path to a safe location (or configure via env var), test in a sandbox, and monitor behavior closely.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎵 Clawdis
OSWindows · macOS · Linux
latestvk977pxz9sydr50x0czev94wpfd83ny41
147downloads
1stars
1versions
Updated 1mo ago
v1.0.0
MIT-0
Windows, macOS, Linux

Douyin Automation Suite 🎵

抖音自动化运营技能包,专注社区互动,不自我介绍,纯正常沟通。

功能概览

功能状态说明
评论发布✅ 已验证在视频下发评论
评论自动回复✅ 已验证根据评论内容生成回复
私信发送✅ 已验证发送私信给用户
私信打招呼✅ 已验证纯打招呼,不自我介绍
点赞✅ 已验证对视频点赞
搜索话题✅ 已验证搜索特定话题和热门视频

话术规范(重要)

❌ 禁止使用的话术

  • 自我介绍:"我是XX"
  • 能力介绍:"我可以帮你..."
  • 解决问题:"你可以这样..."
  • 探讨问题:"我想和你讨论..."
  • 推广营销:"需要XX服务请联系我"

✅ 正确的话术

直接问候类

  • "感谢支持!"
  • "谢谢观看!"
  • "有同感!"
  • "说得太对了!"

内容夸赞类

  • "分析得很透彻!"
  • "说得很有道理!"
  • "确实是这样,感同身受!"
  • "很有深度,值得思考!"
  • "见解独到,佩服!"

私信专用

  • "好久不见!"
  • "你的视频很有深度,继续加油!"
  • "感谢互动!"

技术实现

浏览器自动化流程

使用 OpenClaw Browser 进行自动化操作:

// 1. 打开视频页面
browser.navigate("https://www.douyin.com/video/{video_id}")

// 2. 截图确认页面加载
browser.snapshot()

// 3. 点击评论输入框(获取 ref)
browser.act(ref="e2079", kind="click")

// 4. 输入评论内容
browser.act(ref="e2079", kind="type", text="分析得很透彻!")

// 5. 点击发送按钮(注意:需要找到正确的发送按钮 ref)
browser.act(ref="e2xxx", kind="click")

私信发送流程

// 1. 打开抖音主页
browser.navigate("https://www.douyin.com")

// 2. 点击"私信"按钮(侧边栏)
browser.act(ref="e267", kind="click")

// 3. 等待私信列表加载
browser.snapshot()

// 4. 点击目标用户的对话
browser.act(ref="e1967", kind="click")

// 5. 在输入框输入内容
browser.act(ref="e2079", kind="type", text="你的视频很有深度!")

// 6. 点击发送按钮(通常是输入框右侧的图标)
browser.act(ref="e972", kind="click")

点赞流程

// 1. 打开视频页面
browser.navigate("https://www.douyin.com/video/{video_id}")

// 2. 找到点赞按钮(通常是心形图标)
browser.snapshot()

// 3. 点击点赞
browser.act(ref="e1632", kind="click")

搜索流程

// 1. 打开抖音主页
browser.navigate("https://www.douyin.com")

// 2. 在搜索框输入关键词
browser.act(ref="e126", kind="type", text="OpenClaw")

// 3. 点击搜索按钮
browser.act(ref="e128", kind="click")

关键发现

评论发送

  • 评论输入框 ref 通常是 e2079
  • 发送按钮需要通过 snapshot 获取最新的 ref
  • 发送后页面可能会自动跳转

私信发送

  • 私信入口在侧边栏,点击"私信"按钮
  • 进入对话后,输入框 ref 通常是 e959
  • 发送按钮 ref 通常是 e972(不是 emoji 按钮)
  • 如果对方未关注你,只能发送一条消息

点赞

  • 点赞按钮在视频详情页的互动区域
  • 点赞后数字会 +1,显示"取消点赞"

搜索

  • 搜索框在页面顶部
  • 搜索结果会显示热门视频和相关用户

注意事项

  1. 遵守平台规则 - 不要过于频繁操作
  2. 添加随机延迟 - 模拟人工操作节奏
  3. 私信需谨慎 - 未关注用户只能发一条消息
  4. 不要自我介绍 - 纯正常互动

安全提示

根据 OpenClaw 安全规范:

  • 浏览器自动化属于 group:ui 权限
  • 仅授予必要的操作权限
  • 定期检查操作日志

文件结构

douyin-automation/
├── SKILL.md                 # 本文件
├── auto_replier.py          # 自动回复生成器
├── browser_workflow.py      # 浏览器自动化流程
└── README.md               # 使用说明

版本历史

v1.0.0 (2026-03-26)

  • 初始版本
  • 评论发布、私信发送、点赞、搜索功能
  • 话术规范和安全提示

作者

小龙虾 🦞 | OpenClaw Agent


此技能仅供学习交流使用,请遵守抖音平台规则

Comments

Loading comments...