Douyin Creator Marketplace (Xingtu) KOL Content Keyword Analysis API

Call GET /api/douyin-xingtu/gw/api/gauthor/get_author_content_hot_keywords/v1 for Douyin Creator Marketplace (Xingtu) KOL Content Keyword Analysis through Ju...

Security Scan

The skill is internally consistent: it calls JustOneAPI to fetch Douyin (Xingtu) KOL keyword data, requires only node and a JustOneAPI token, and its files and instructions match that purpose.

Purpose & Capability

Name/description match the actual behavior: the code calls https://api.justoneapi.com for the documented Douyin Creator Marketplace endpoint. Required items (node binary and JUST_ONE_API_TOKEN) are appropriate and proportional to the stated purpose; no unrelated credentials or binaries are requested.

Instruction Scope

SKILL.md instructs the agent to run bin/run.mjs with --token and --params-json. That stays within scope (fetching endpoint data). Note: the implementation sends the API token as a query parameter (operation parameter named 'token'), which can cause tokens to appear in URL logs or referrers — consider whether that exposure is acceptable.

Install Mechanism

There is no install spec (instruction-only) and the included code is a small Node script; nothing is downloaded from external URLs or extracted. Risk from install mechanism is minimal, assuming node is trusted on the host.

Credentials

Only JUST_ONE_API_TOKEN is required, which is appropriate. However, the token is passed to the API as a query parameter by the helper, increasing risk of accidental leakage (e.g., HTTP logs, proxies). No other secrets or unrelated env vars are requested.

Persistence & Privilege

The skill does not request permanent/always-on inclusion and doesn't modify other skills or system configs. It runs on demand and only performs outbound requests to the documented API host.

Assessment

This skill appears to do only what it says: call JustOneAPI to fetch Douyin/Xingtu KOL keyword data. Before installing, verify you trust https://api.justoneapi.com and that the JUST_ONE_API_TOKEN you provide has only the minimum required scope. Be aware the helper sends the token as a URL query parameter (not an Authorization header), which can expose the token in logs or referer headers — avoid using long-lived or highly privileged keys if you can. Do not paste your token into chat or public places; rotate it if you suspect it was logged or leaked. If you need stricter token handling (e.g., header-based auth), review/modify the script to use an Authorization header instead.

Douyin Creator Marketplace (Xingtu) KOL Content Keyword Analysis

Use this focused JustOneAPI skill for kOL Content Keyword Analysis in Douyin Creator Marketplace (Xingtu). It targets GET /api/douyin-xingtu/gw/api/gauthor/get_author_content_hot_keywords/v1. Required non-token inputs are oAuthorId. OpenAPI describes it as: Get Douyin Creator Marketplace (Xingtu) kOL Content Keyword Analysis data, including core metrics, trend signals, and performance indicators, for content theme analysis and creator positioning research.

Endpoint Scope

• Platform key: douyin-xingtu
• Endpoint key: gw/api/gauthor/get_author_content_hot_keywords
• Platform family: Douyin Creator Marketplace (Xingtu)
• Skill slug: justoneapi-douyin-xingtu-gw-api-gauthor-get-author-content-hot-keywords

Operation	Version	Method	Path	OpenAPI summary
gwApiGauthorGetAuthorContentHotKeywordsV1	v1	GET	/api/douyin-xingtu/gw/api/gauthor/get_author_content_hot_keywords/v1	KOL Content Keyword Analysis

Inputs

Parameter	In	Required by	Optional by	Type	Notes
oAuthorId	query	all	n/a	string	Author's unique ID

Request body: none documented; send parameters through path or query arguments.

Version Choice

Use gwApiGauthorGetAuthorContentHotKeywordsV1 for the documented v1 endpoint. There are no alternate versions grouped in this skill.

Run This Endpoint

Supported operation IDs in this skill: gwApiGauthorGetAuthorContentHotKeywordsV1.

node {baseDir}/bin/run.mjs --operation "gwApiGauthorGetAuthorContentHotKeywordsV1" --token "$JUST_ONE_API_TOKEN" --params-json '{"oAuthorId":"<oAuthorId>"}'

Ask for any missing required parameter before calling the helper. Keep user-provided IDs, cursors, keywords, and filters unchanged.

Environment

• Required: JUST_ONE_API_TOKEN
• Pass the token with --token "$JUST_ONE_API_TOKEN"; do not paste token values into chat messages, screenshots, or logs.
• Get a token from Just One API Dashboard.
• Authentication details: Just One API Usage Guide.

Output Focus

• State the operation ID and endpoint path used, for example gwApiGauthorGetAuthorContentHotKeywordsV1 on /api/douyin-xingtu/gw/api/gauthor/get_author_content_hot_keywords/v1.
• Echo the required lookup scope (oAuthorId) before summarizing results.
• Prioritize fields that support this endpoint purpose: Get Douyin Creator Marketplace (Xingtu) kOL Content Keyword Analysis data, including core metrics, trend signals, and performance indicators, for content theme analysis and creator positioning research.
• Return raw JSON only after the short, endpoint-specific summary.
• If the backend errors, include the backend payload and the exact operation ID.