dy-caption

提取抖音视频语音内容并转成文字，支持提交视频链接转写，查询转写余额及历史记录。

Security Scan

The skill's declared metadata is inconsistent with its runtime instructions: it will send user-provided Douyin links and an API key to a third-party service (api.dycaption.cn) but the registry entry does not declare the required env var or curl dependency.

Purpose & Capability

The skill's name/description (transcribe Douyin video audio) matches the SKILL.md instructions (call api.dycaption.cn). However the registry metadata omits dependencies that the SKILL.md requires: SKILL.md lists curl and expects an API key (DY_CAPTION_API_KEY), but the manifest declares no required binaries or env vars. This mismatch is incoherent and should be clarified.

Instruction Scope

SKILL.md gives concrete instructions to send the user's share link/share text and the DY_CAPTION_API_KEY to https://api.dycaption.cn and to poll for task results. That behavior is consistent with the stated purpose (a hosted transcription API) but it explicitly transmits user content and a credential to an external service — a privacy/data-exfiltration risk that users must accept before use.

Install Mechanism

This is an instruction-only skill with no install spec or code files, so nothing is written to disk by an installer. That's low install risk.

Credentials

The runtime requires a single API key (DY_CAPTION_API_KEY) to authenticate to the third-party service; that is proportionate for the feature. However the required env var is not declared in the registry metadata, and SKILL.md lists curl as required while the manifest lists no binaries — this missing declaration is an inconsistency and should be corrected so users know what they must provide.

Persistence & Privilege

The skill does not request always:true, does not modify other skills or system-wide settings, and has normal (non-persistent) invocation behavior.

What to consider before installing

Before installing: understand that this skill will send the Douyin share text/link and whatever API key you provide to api.dycaption.cn. The registry metadata is incomplete — you must set DY_CAPTION_API_KEY and have curl available, though those are not listed in the manifest. Only use this skill if you trust the external service. Recommendations: (1) verify the api.dycaption.cn domain and the upstream GitHub repo (https://github.com/xwchris/douyin-caption-cli) to inspect server/client code, (2) use a limited-scope or disposable API key, (3) avoid submitting sensitive content or credentials, and (4) ask the author or registry maintainer to update the skill metadata to list DY_CAPTION_API_KEY and curl so it's explicit what the skill requires.

抖音字幕提取

通过 dy-caption 服务把抖音视频里的语音转成文字。

注意：本技能会将抖音分享链接 / 分享文案 与 API Key 发送到 dy-caption 服务，请确认你信任该服务后再使用。

认证

调用接口前需要先准备 API Key：

export DY_CAPTION_API_KEY="你的 API Key"

快速使用

# 提交转写任务
curl -X POST https://api.dycaption.cn/api/v1/transcribe \
  -H "X-API-Key: $DY_CAPTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"input":"7.53 复制打开抖音，看看【示例】 https://v.douyin.com/xxxx/"}'

# 查询余额
curl -X GET https://api.dycaption.cn/api/v1/credits \
  -H "X-API-Key: $DY_CAPTION_API_KEY"

# 查询历史
curl -X GET https://api.dycaption.cn/api/v1/history \
  -H "X-API-Key: $DY_CAPTION_API_KEY"

任务流程

1. 提交 /api/v1/transcribe
2. 记录返回的 taskId
3. 轮询 /api/v1/transcribe/:taskId
4. 任务完成后读取 text

相关链接

• CLI 工具：https://github.com/xwchris/douyin-caption-cli
• API 服务：https://api.dycaption.cn