获取抖音博主主页视频列表

• Analyzed: May 10, 2026, 6:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3b4722e82a03ccfbebcf28d44622c5a282c84585ce19ea6dc6e22ed24ee6f6d7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill requires users to provide sensitive Douyin session cookies (DOUYIN_COOKIE) and an API key, which are then transmitted to a third-party API endpoint (https://xueai.szzy.top/api/agi/douyin/user-home-videos) in src/index.js. While this behavior is functionally necessary for the stated purpose of scraping Douyin data via a proxy service, it poses a significant security risk by exposing the user's full session credentials to an unverified external entity.