ClawHub
Back to skill

Security audit

Douyin Title Generator V2

Security checks for vulnerabilities and agentic risk

Overview

This is a local Douyin title generator, but its PowerShell wrapper can evaluate user-supplied text as commands and its performance claims exceed what the code supports.

Review before installing. Prefer running the Python script directly with trusted inputs, avoid generate.ps1 until Invoke-Expression is replaced with structured argument passing, and treat the view, engagement, recommendation, and algorithm-optimization claims as unvalidated demo-style estimates rather than real forecasts.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Context-Inappropriate Capability

High
Confidence
98% confidence
Finding
The script builds a PowerShell command string from user-controlled parameters and executes it with Invoke-Expression. Even though some arguments are wrapped in quotes, this is still an unnecessary dynamic-evaluation pattern for a title generator and can enable command injection or unexpected code execution if quoting or escaping is bypassed, especially since Topic, Style, Audience, and Trending are all externally supplied.

Description-Behavior Mismatch

Medium
Confidence
91% confidence
Finding
When export is enabled, the script writes output to an arbitrary path provided by the caller via ExportPath. This exceeds the minimal behavior implied by a title-generation skill and can overwrite user files or place content in unintended locations if the path is abused, particularly in automated agent environments where file writes may have broader consequences.

Static analysis

No suspicious patterns detected.