Skills/ClawHub/douyin-daily-surge

douyin-daily-surge@1.4.0

CAUTION

Publisher claims: "抖音每日点赞飙升榜查询工具。实时获取全平台抖音作品，输出单日点赞TOP1000榜单，支持按赛道查询、按关键词查询、按发布时间筛选、按抖音视频时长筛选。当用户查询抖音飙升榜、抖音点赞飙升、抖音飙升排名、抖音飙升榜时使用。触发词：抖音飙升榜、抖音点赞飙升、飙升排名、飙升榜、抖音飙升、抖音新增视频榜单、抖音垂类行业点赞榜。支持四大能力：(1) 关键词搜索视频/图文，可按点赞数、发布时间、视频时长、内容类型筛选排序；(2) 实时热榜查询，获取抖音热搜词条与热度数据；(3) 博主作品抓取，按主页链接或 sec_uid 获取公开作品列表；(4) 视频评论分析，按视频链接或 aweme_id 获取评论内容与" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher why20261 · joined 2 days agoInstalls 289Last detonated 25 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

File type combined with upload actionreadme.md:152 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsreferences/changelog.md:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/douyin/post-cli.js:122 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionreadme.md:154 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathssrc/douyin/comment-cli.js:113 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionSKILL.md:249 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathssrc/douyin/search-cli.js:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/douyin/hot-cli.js:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05