Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

douyin-engager

v1.0.0

自动在抖音搜索指定主题的热门视频,进行评论和关注操作。 支持设置间隔时间、操作次数、自定义评论内容。 触发词:抖音评论、抖音关注、抖音互动、抖音推广、douyin engager

0· 345·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with the included Python scripts: they use Playwright to search Douyin, post comments, and follow accounts. The files implement exactly the stated functionality.
!
Instruction Scope
SKILL.md instructs the agent/user to run local Python scripts which will launch a browser, require QR login, and perform automated interactions. The instructions do not read unrelated system files or env vars, but they direct automated account actions that can violate platform policies or be abused. The SKILL.md asks the user to run pip install playwright and playwright install chromium, but the registry metadata did not declare these dependencies.
!
Install Mechanism
There is no formal install spec in the registry even though the scripts require Playwright (which will download a Chromium binary at install/runtime). The lack of an explicit install entry means dependency installation is manual and the environment may be unprepared. Playwright's Chromium download is expected for browser automation but is a large external binary download — this is noted but not malicious.
Credentials
The skill requests no environment variables or credentials from the registry. It expects the user to QR-login in the browser and stores browser session data and logs under a local .openclaw workspace directory. This local storage of session cookies and logs is proportional to the task but you should be aware that your account session is persisted on disk in the skill's browser_data and engage_log.json.
Persistence & Privilege
always is false and the skill does not request elevated platform privileges. It writes files under the skill's workspace (browser_data, logs) but does not modify other skills or global config.
What to consider before installing
This skill appears to do what it claims (automating Douyin comments and follows via Playwright), but consider the following before installing or running it: - Operational risk: Automated commenting/following can trigger Douyin's anti-abuse protections and may violate the platform's terms of service; use with accounts you can afford to lose. The SKILL.md itself warns about rate limits. - Dependencies: You must install Playwright and run 'playwright install chromium' — that will download a large Chromium binary. The package manager/install steps are not declared in the registry metadata, so the agent/platform may not auto-install them. - Local data: The skill stores browser session data and logs under ~/.openclaw/... (and one included script uses a Windows absolute path). Session cookies and logs are stored on disk (engage_log.json and browser_data). If you want to avoid persisting your account, use test mode or an isolated environment. - Cross-platform inconsistency: One file (auto_engage.py) contains Windows-specific hardcoded paths while others use Path.home(), which could cause confusion or accidental writes to unexpected locations. - Safety steps: Run in test mode first (scripts support a --test or interactive mode), review the scripts yourself (they are included), run in an isolated VM/container if possible, and do not use your primary account until you are comfortable with behavior. Given these issues (missing install spec, file-path inconsistencies, and the inherent abuse/ToS risk), proceed cautiously. If you want me to, I can highlight the specific lines that write session/log files, or produce a short checklist to safely test this skill in an isolated environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk972rzt6w2dtjvvf1msn6j5keh830qaa

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments