Douyin Video Downloader (抖音视频下载器)

Download Douyin (抖音) videos via the TikHub API — no login required. USE THIS SKILL whenever the user: - Shares a Douyin link (v.douyin.com, douyin.com, or an...

Security Scan

The skill's code and instructions match its stated purpose (downloading Douyin videos via the TikHub API); there are no unrelated credentials or installers, but note the skill reads a local config file for a TikHub token and will make outbound network requests and save files to your Downloads folder.

Purpose & Capability

The name/description (Douyin downloader via TikHub) align with the included script and SKILL.md. The script calls the TikHub API, parses a direct video URL, and optionally downloads to ~/Downloads/douyin. Required functionality (a TikHub token) is consistent with the purpose.

Instruction Scope

The SKILL.md and script require a TikHub API token stored in ~/.openclaw/config.json and instruct running the bundled Python script. However, the registry metadata did not declare any required config paths; this mismatch (metadata says no config paths but the runtime reads ~/.openclaw/config.json) is an inconsistency that users should be aware of. Otherwise the instructions are scoped to the stated task (resolving short links, calling the API, downloading the video).

Install Mechanism

No install spec (instruction-only with one bundled script). No downloads from arbitrary URLs or package installs — low install risk. The skill will perform normal network I/O and write files when used.

Credentials

No environment variables or external credentials are requested by the registry, but the script requires a TikHub API token stored in a local config file (~/.openclaw/config.json). This single credential is proportional to the task, but it is stored in plaintext JSON and readable by any local process with access to that file.

Persistence & Privilege

always:false (good). The skill is allowed to be invoked autonomously by the agent (platform default). SKILL.md explicitly tells agents to 'always use this skill when you detect a Douyin URL', which could cause the agent to run the script whenever a Douyin link appears even if the user didn't explicitly request a download — users should consider whether they want automatic invocation in that context.

Assessment

This skill appears to do what it claims, but review these practical points before installing: - The script reads your TikHub API token from ~/.openclaw/config.json (plain JSON). Only put a token there if you trust the local environment and the TikHub service. Any local process that can read that file can use the token. - The skill makes outbound requests to api.tikhub.io and to the video URL host (douyin). If you have network/privacy concerns, be aware that a third-party service (TikHub) will see the requested video IDs and trigger the subsequent fetches. - Downloads are saved to ~/Downloads/douyin by default. Ensure you are comfortable with files being written there and with the copyright/legal implications of saving videos. - Metadata omitted a required config path: the registry showed no config paths but the SKILL.md/script require ~/.openclaw/config.json. This is an informational inconsistency — not necessarily malicious, but worth noting. - If you are concerned about automatic invocation, disable autonomous skill invocation or instruct the agent not to auto-run this skill when it merely detects a link. If you want stronger safety: inspect the script yourself (it is included), store the token in a more restricted location and update the code if desired, or run the script manually rather than allowing autonomous invocation.

Douyin Downloader

Download Douyin videos using the TikHub API. Handles short links, full URLs, and bare video IDs.

Configuration

Requires a TikHub API token in ~/.openclaw/config.json:

{ "tikhub_api_token": "your-token-here" }

Free tokens: https://user.tikhub.io/register

Workflow

1. Detect input — identify a Douyin link or modal_id from the user's message
2. Run the script — call python3 {baseDir}/scripts/douyin_download.py
3. Show result — report the modal_id and either the video URL or the saved file path

Commands

Get video info (no download)

python3 {baseDir}/scripts/douyin_download.py "https://v.douyin.com/xxxxx/"

Download to default location (~/Downloads/douyin/)

python3 {baseDir}/scripts/douyin_download.py "https://v.douyin.com/xxxxx/" --download

Download to a custom directory

python3 {baseDir}/scripts/douyin_download.py "https://v.douyin.com/xxxxx/" --download --output-dir /path/to/dir

Use a bare modal_id

python3 {baseDir}/scripts/douyin_download.py "7615599455526585067" --download

Accepted Input Formats

Format	Example
Short link	https://v.douyin.com/iABCxyz/
Full URL with modal_id	https://www.douyin.com/video/7615599455526585067
URL query param	https://www.douyin.com/jingxuan?modal_id=7615599455526585067
Bare modal_id	7615599455526585067

Output

• Without --download: prints modal_id + direct video URL
• With --download: downloads to ~/Downloads/douyin/douyin_<modal_id>.mp4 (or custom dir)