Douyin Creator Marketplace (Xingtu) Showcase Items API

Call GET /api/douyin-xingtu/get-kol-show-items-v2/v1 for Douyin Creator Marketplace (Xingtu) Showcase Items through JustOneAPI with kolId.

Security Scan

The skill is a small, coherent wrapper around JustOneAPI's Douyin/Xingtu endpoint and only requires a single API token and node to call the documented GET endpoint.

Purpose & Capability

Name/description, required binary (node), required env var (JUST_ONE_API_TOKEN), and included code all align with a thin HTTP client for the documented JustOneAPI endpoint.

Instruction Scope

SKILL.md instructs running the included node script with --operation and --token and to provide kolId; the runtime does only what the docs describe (builds a URL, adds query params, calls api.justoneapi.com, returns JSON). Note: the script expects the token on the command line (--token), which can expose the token in process listings or logs — a minor operational risk to consider.

Install Mechanism

There is no installer; this is an instruction-only skill that ships a small Node script. No downloads from third-party URLs, no package installs, and only the standard node binary is required.

Credentials

Only a single credential (JUST_ONE_API_TOKEN) is requested and it directly maps to the API's required 'token' query parameter. No unrelated credentials, files, or config paths are requested.

Persistence & Privilege

always:false (default) and the skill does not request system-wide modifications or access to other skills' config. Autonomous invocation is allowed by platform default but is not combined with other elevated privileges.

Assessment

This skill appears to do exactly what it claims: call JustOneAPI's Douyin/Xingtu showcase-items endpoint using JUST_ONE_API_TOKEN. Before installing: (1) Verify you trust https://api.justoneapi.com and the token you obtain (create a scoped/limited token if possible); (2) Prefer passing secrets via a safe mechanism — the provided script expects --token which can expose the secret in process listings and logs, so consider wrapping or modifying the script to read the token from an environment variable or secure file descriptor instead; (3) Run in a least-privileged environment and avoid pasting the token into chat or logs; (4) If you do not trust the publisher, inspect the included bin/run.mjs (which is small and straightforward) or run it in an isolated container; (5) Rotate the token if you suspect exposure.

Douyin Creator Marketplace (Xingtu) Showcase Items

Use this focused JustOneAPI skill for showcase Items in Douyin Creator Marketplace (Xingtu). It targets GET /api/douyin-xingtu/get-kol-show-items-v2/v1. Required non-token inputs are kolId. OpenAPI describes it as: Get Douyin Creator Marketplace (Xingtu) showcase items data, including core metrics, trend signals, and performance indicators, for creator evaluation, campaign planning, and marketplace research.

Endpoint Scope

• Platform key: douyin-xingtu
• Endpoint key: get-kol-show-items-v2
• Platform family: Douyin Creator Marketplace (Xingtu)
• Skill slug: justoneapi-douyin-xingtu-get-kol-show-items-v2

Operation	Version	Method	Path	OpenAPI summary
getKolShowItemsV2V1	v1	GET	/api/douyin-xingtu/get-kol-show-items-v2/v1	Showcase Items

Inputs

Parameter	In	Required by	Optional by	Type	Notes
acceptCache	query	n/a	all	boolean	Enable cache
kolId	query	all	n/a	string	KOL ID
onlyAssign	query	n/a	all	boolean	Whether true is Xingtu video, false is personal video

Request body: none documented; send parameters through path or query arguments.

Version Choice

Use getKolShowItemsV2V1 for the documented v1 endpoint. There are no alternate versions grouped in this skill.

Run This Endpoint

Supported operation IDs in this skill: getKolShowItemsV2V1.

node {baseDir}/bin/run.mjs --operation "getKolShowItemsV2V1" --token "$JUST_ONE_API_TOKEN" --params-json '{"kolId":"<kolId>"}'

Ask for any missing required parameter before calling the helper. Keep user-provided IDs, cursors, keywords, and filters unchanged.

Environment

• Required: JUST_ONE_API_TOKEN
• Pass the token with --token "$JUST_ONE_API_TOKEN"; do not paste token values into chat messages, screenshots, or logs.
• Get a token from Just One API Dashboard.
• Authentication details: Just One API Usage Guide.

Output Focus

• State the operation ID and endpoint path used, for example getKolShowItemsV2V1 on /api/douyin-xingtu/get-kol-show-items-v2/v1.
• Echo the required lookup scope (kolId) before summarizing results.
• Prioritize fields that support this endpoint purpose: Get Douyin Creator Marketplace (Xingtu) showcase items data, including core metrics, trend signals, and performance indicators, for creator evaluation, campaign planning, and marketplace research.
• Return raw JSON only after the short, endpoint-specific summary.
• If the backend errors, include the backend payload and the exact operation ID.