抖音视频解析下载（KK定制版）

抖音视频解析下载工具。从分享链接提取无水印下载地址，支持下载+转文字+内容分析。

Security Scan

The skill's stated purpose (download, transcribe and analyze Douyin videos) matches the instructions, but there are incoherent and potentially risky elements — notably a hard-coded user directory the agent is told to import/execute code from, missing declared required binaries, and use of third‑party parsing endpoints — so proceed with caution.

Purpose & Capability

The skill's name/description (Douyin video download + transcription) aligns with using ffmpeg, whisper, curl and a local 'douyin-analyzer' module. However the declared required directory is a hard-coded, user-specific path (/Users/kk/.openclaw/mcp-servers/douyin-analyzer) rather than a generic location (e.g. ~/.openclaw), which is unusual for a published skill and suggests it was tailored to one developer's machine. The SKILL.md references mcporter, Python imports, curl and Playwright but the declared required binaries list only includes 'ffmpeg' and 'whisper' — missing entries (curl, python, mcporter, playwright/node) are incoherent with the instructions.

Instruction Scope

The runtime instructions tell the agent to modify sys.path and import server code from the specified local directory and/or call local MCP endpoints. That causes execution of arbitrary code present in the user's ~/.openclaw/mcp-servers/douyin-analyzer directory — a significant execution surface. The instructions also call external parsing APIs (liuxingw.com) and official Douyin endpoints; sending video URLs and video content to third parties could leak data. Writing temp files to /tmp is documented (expected), but the combination of importing local code and making network calls broadens risk.

Install Mechanism

This is an instruction-only skill with no install spec (lowest install risk). The metadata contains an 'install' entry saying the MCP is installed in ~/.openclaw/mcp-servers/douyin-analyzer, but the requires.dirs uses an absolute /Users/kk/... path — inconsistent and likely a packaging oversight. No downloads or archive extracts are requested by the skill itself.

Credentials

The skill declares no required environment variables or credentials, which is proportionate. However the instructions direct the agent to call external endpoints (official Douyin APIs and a third-party liuxingw.com parser). That means video URLs, and potentially downloaded media, could be transmitted to external services. The skill does not warn about what the third-party parser does with submitted data.

Persistence & Privilege

The skill does not request always:true and is not force-enabled. It does not ask to modify other skill configs or system-wide settings. Autonomous invocation remains possible (platform default), which combined with the other concerns increases risk, but the skill itself does not request elevated persistence.

What to consider before installing

This skill appears to be a personalized 'KK' wrapper that expects a local douyin-analyzer installation at a hard-coded path and will import and execute code from that path. Before installing or enabling it: 1) Do not enable it unless you trust the code in ~/.openclaw/mcp-servers/douyin-analyzer — importing that module runs arbitrary local Python. 2) If you plan to use it, change the path references to your own verified installation path and verify the contents of server.py (DouyinParser/AudioProcessor). 3) Ensure required tools (curl, python, mcporter, ffmpeg, whisper, and Playwright/node if you intend to use the browser fallback) are present; the metadata is missing some of these. 4) Be aware third-party parsing endpoints (liuxingw.com) will receive requests — avoid sending private/credentialed links or sensitive content to them. 5) If you don’t have a trusted local 'douyin-analyzer' installation, prefer a skill that bundles its own vetted code or one from a known upstream; otherwise run this in a sandboxed environment. 6) If you want a lower-risk setup, restrict the skill to only use official APIs and local binaries you control, and remove any automatic import/exec of user-path code.

抖音视频解析下载

核心功能

从抖音分享链接提取无水印视频下载地址，支持：

1. 解析下载地址（MCP 调用）
2. 下载视频（curl）
3. 提取音频 + 转文字（ffmpeg + whisper）
4. 内容分析

使用方式

方式一：MCP 调用（推荐）

已注册到 mcporter，直接可用：

mcporter call douyin-analyzer.parse_douyin_video_info share_link="https://v.douyin.com/xxx"
mcporter call douyin-analyzer.get_douyin_download_link share_link="https://v.douyin.com/xxx"
mcporter call douyin-analyzer.analyze_douyin_video share_link="https://v.douyin.com/xxx"

方式二：直接调用 Python

import sys
sys.path.insert(0, '/Users/kk/.openclaw/mcp-servers/douyin-analyzer')
from server import DouyinParser, AudioProcessor

# 1. 提取视频信息
video_id = DouyinParser.extract_video_id("https://v.douyin.com/xxx")
info = DouyinParser.get_video_info(video_id)
print(info)

# 2. 获取无水印下载链接
url = DouyinParser.get_download_url(video_id, "https://v.douyin.com/xxx")
print(f"下载链接: {url}")

# 3. 下载视频
ap = AudioProcessor()
ap.download_video(url, "/tmp/video.mp4")

# 4. 转文字（GPU加速）
ap.transcribe("/tmp/video.mp4")

解析原理

层	方法	说明
第一层	iesdouyin.com 官方 API	直接请求，返回 playwm 地址，替换 playwm→play
第二层	第三方解析 API	liuxingw.com/api/douyin/api.php
第三层	Playwright 浏览器	模拟手机访问分享链接，提取 <video> 标签

无水印原理： playwm = 带水印，play = 无水印。替换域名即可。

注意事项

• 无需登录，分享链接即可解析
• 无需 Cookie，任何抖音视频都能解析
• Whisper 转文字推荐加 --device mps 用 GPU 加速
• 视频文件会暂存 /tmp/，用完可手动删除