Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Douyin search helper that uses web search and page fetches without credentials, code execution, persistence, or account-changing actions.
Installers should know this skill will use web search and may fetch public Douyin pages when asked for Douyin discovery or video details. Its triggers could activate on broad Douyin search requests, but it does not request credentials, alter accounts, download videos, or change local system state.
The trigger list is broad enough to activate on many ordinary Douyin-related requests, such as generic queries about Douyin search, hot topics, or videos. This can cause the skill to be invoked when the user did not explicitly intend to use this scraper, increasing the chance of unintended browsing/scraping behavior and overbroad tool activation.
The activation rule is broad enough to trigger on many generic requests containing '抖音' plus vague search intent, which can cause this skill to be selected when another more appropriate skill should handle the request. In an agentic system, overbroad routing increases the chance of unintended web searches, unnecessary scraping, and incorrect tool use based on ambiguous user intent.
The tips instruct that Chinese keywords work better and suggest trying the Chinese equivalent of a term, which nudges the interaction toward a specific language. There is no accompanying instruction to preserve the user's preferred language or ask before switching languages/locales.
No suspicious patterns detected.
