获取抖音博主主页视频列表

• Outcome: Review
• Latest audit: Sep 15, 2026 · 1:54 AM UTC
• Version: 1.0.0

Overview

The skill does fetch Douyin user videos, but it forwards a Douyin login cookie and API key to a third-party endpoint without clear disclosure or endpoint controls.

Review this skill carefully before installing. Only use it if you trust the xueai-portal service with your Douyin login cookie and API key, understand that the cookie may represent an authenticated session, and can rotate or revoke those credentials. Avoid setting DOUYIN_API_URL unless you fully control and trust the destination.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Error

• Location: src/index.js:13

Finding

Disclosure of API Credentials and Douyin Session Cookie to a Configurable Third-Party Endpoint

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (9)

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 87% confidence

Finding

The skill uses sensitive environment variables (DOUYIN_API_KEY and DOUYIN_COOKIE) but does not declare an explicit tool scope such as permissions or allowed-tools. This weakens least-privilege boundaries and makes it harder for the platform or reviewer to verify what secrets and tool capabilities the skill is allowed to access.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The trigger list contains broad terms like douyin, 抖音, and 抖音视频, which can cause the skill to activate on generic conversation about Douyin rather than an explicit request to fetch a creator's video list. Unintended activation is risky here because the skill is configured to use sensitive credentials and contact an external service automatically.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The documentation instructs users to configure a Douyin cookie and API key but does not clearly warn that these sensitive credentials will be used by an external tool/service. Cookies can grant account access and API keys enable authenticated billing or identity, so silent transmission or unclear disclosure creates meaningful credential-handling and privacy risk.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The skill sends both a secret API key and a Douyin cookie to a remote third-party endpoint (https://xueai.szzy.top/...) rather than directly to Douyin, which exposes sensitive credentials and session data to an external service. In this skill’s context, the cookie may represent an authenticated Douyin session, so forwarding it can enable account/session misuse, tracking, or unauthorized data access if the remote service is compromised or untrusted.

Content

No source excerpt is available for this finding.

Overly Broad Trigger

Low

• Category: Trigger Abuse
• Confidence: 79% confidence

Finding

The single-word trigger 抖音 is very short and likely to match many unrelated or exploratory user messages. Because this skill can automatically use stored credentials and call an external service, overly short triggers increase the chance of accidental invocation and unintended data transmission.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 81% confidence

Finding

The natural-language documentation and examples are entirely in Chinese, with no indication that other languages are supported or that the Chinese-only presentation is a justified regional requirement. Under the stated policy, forcing a specific language without user opt-in can be a locale-policy issue.

Content

No source excerpt is available for this finding.

Unpinned Dependencies

Low

• Category: Supply Chain
• Confidence: 97% confidence

Finding

The dependency uses a caret range ("^1.6.0") instead of pinning an exact version, which allows different installations to resolve to different releases over time. That weakens build reproducibility and can unintentionally pull in a newly introduced vulnerable or malicious package version through the normal dependency resolution process.

Content

Scanner excerpt · package.json (reported line 7)May include surrounding context.

json

"description": "获取抖音博主的视频列表 - OpenClaw Skill",
  "main": "src/index.js",
  "dependencies": {
    "axios": "^1.6.0"
  },
  "openclaw": {
    "skill": "douyin-user-videos",

Unverifiable Dependency: axios has 16 known advisory(ies) (CVE-2026-44494 (axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `co); CVE-2026-44495 (axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollut); CVE-2025-62718 (Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF) +13 more), but the manifest does not pin a version, so it is unknown whether the installed release is affected

Low

• Category: Supply Chain
• Confidence: 90% confidence

Finding

The manifest references axios without an exact pinned version, and the package has multiple known advisories, including issues that may enable SSRF, response hijacking, or credential theft depending on usage. Because the installed version is not fixed and the skill likely performs outbound HTTP requests to fetch Douyin video data, this uncertainty increases the chance that a vulnerable axios release could be deployed.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

The request hard-codes the Accept-Language header to prefer zh-CN/zh, which imposes a locale preference regardless of user choice. The file does not document this as a region-specific requirement or offer a configurable language/locale option.

Content

No source excerpt is available for this finding.

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: src/index.js:14