Douyin NLP Search

PassAudited by VirusTotal on May 8, 2026.

Overview

Type: OpenClaw Skill Name: douyin-nlp-search Version: 1.0.0 The skill bundle is a functional template for a Douyin (TikTok China) search tool that uses natural language processing to extract search parameters. The core logic in `scripts/search_douyin.py` uses regex for parsing and provides mock data results, with no actual network exfiltration or dangerous execution (like eval or os.system). The documentation in `SKILL.md` and `README.md` is transparent about its current mock implementation and intended use cases.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You may receive example/mock video results rather than current Douyin search data.

Why it was flagged

The code explicitly uses simulated search data, so users should not mistake the returned 'search results' for live Douyin results unless a real integration is added.

Skill content
# 模拟搜索结果
    # 实际实现可以使用:
Recommendation

Treat outputs as a demo unless you have explicitly configured and verified a real browser/API data source.

What this means

If extended beyond the mock script, the agent could automate web searches and scrape page content.

Why it was flagged

The skill suggests optional browser automation for real scraping. That is aligned with the stated purpose, but browser automation can have platform-policy, rate-limit, and user-control implications.

Skill content
结合 `agent-browser` skill 实现真实浏览器搜索
Recommendation

Only enable real scraping with explicit user approval, clear rate limits, and compliance with Douyin's terms and robots.txt.

What this means

If you add a real API integration, the skill may need access to a Douyin or third-party service credential.

Why it was flagged

A future real API integration may require an API key, although the current script does not read or transmit credentials.

Skill content
对接抖音开放平台的搜索接口,需要申请 API Key。
Recommendation

Use scoped credentials, store them outside prompts, avoid logging them, and confirm exactly what API access is being granted.